CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3905 – Tenda AC500 execCommand R7WebsSecurityHandler stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3905
A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate the attack remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC500/R7WebsSecurityHandler.md https://vuldb.com/?ctiid.261141 https://vuldb.com/?id.261141 https://vuldb.com/?submit.313790 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3882 – Tenda W30E fromRouteStatic stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3882
A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromRouteStatic.md https://vuldb.com/?ctiid.260916 https://vuldb.com/?id.260916 https://vuldb.com/?submit.312825 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3881 – Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3881
A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/frmL7ProtForm.md https://vuldb.com/?ctiid.260915 https://vuldb.com/?id.260915 https://vuldb.com/?submit.312824 • CWE-121: Stack-based Buffer Overflow •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3880 – Tenda W30E WriteFacMac formWriteFacMac os command injection
https://notcve.org/view.php?id=CVE-2024-3880
A vulnerability has been found in Tenda W30E 1.0.1.25(633) and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formWriteFacMac.md https://vuldb.com/?ctiid.260914 https://vuldb.com/?id.260914 https://vuldb.com/?submit.312823 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3879 – Tenda W30E setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3879
A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633). This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formSetCfm.md https://vuldb.com/?ctiid.260913 https://vuldb.com/?id.260913 https://vuldb.com/?submit.312822 • CWE-121: Stack-based Buffer Overflow •