CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2024-30620
https://notcve.org/view.php?id=CVE-2024-30620
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan. Tenda AX1803 v1.0.0.1 contiene un desbordamiento de pila a través del parámetro serviceName en la función fromAdvSetMacMtuWan. • https://github.com/re1wn/IoT_vuln/blob/main/Tenda_AX1803_v1.0.0.1_contains_a_stack_overflow_via_the_serviceName_parameter_in_the_function_fromAdvSetMacMtuWan.md • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2024-30621
https://notcve.org/view.php?id=CVE-2024-30621
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan. Tenda AX1803 v1.0.0.1 contiene un desbordamiento de pila a través del parámetro serverName en la función fromAdvSetMacMtuWan. • https://github.com/re1wn/IoT_vuln/blob/main/Tenda_AX1803_v1.0.0.1_contains_a_stack_overflow_via_the_serverName_parameter_in_the_function_fromAdvSetMacMtuWan.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3012 – Tenda FH1205 GetParentControlInfo stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3012
A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been declared as critical. This vulnerability affects the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be initiated remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/GetParentControlInfo.md https://vuldb.com/?ctiid.258298 https://vuldb.com/?id.258298 https://vuldb.com/?submit.301491 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3011 – Tenda FH1205 QuickIndex formQuickIndex stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3011
A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formQuickIndex.md https://vuldb.com/?ctiid.258297 https://vuldb.com/?id.258297 https://vuldb.com/?submit.301490 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3010 – Tenda FH1205 setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-3010
A vulnerability was found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this issue is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formSetCfm.md https://vuldb.com/?ctiid.258296 https://vuldb.com/?id.258296 https://vuldb.com/?submit.301489 • CWE-121: Stack-based Buffer Overflow •