CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2993 – Tenda FH1203 QuickIndex formQuickIndex stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2993
A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formQuickIndex.md https://vuldb.com/?ctiid.258162 https://vuldb.com/?id.258162 https://vuldb.com/?submit.301372 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2992 – Tenda FH1203 setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2992
A vulnerability was found in Tenda FH1203 2.0.1.6 and classified as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formSetCfm.md https://vuldb.com/?ctiid.258161 https://vuldb.com/?id.258161 https://vuldb.com/?submit.301371 • CWE-121: Stack-based Buffer Overflow •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2991 – Tenda FH1203 WriteFacMac formWriteFacMac command injection
https://notcve.org/view.php?id=CVE-2024-2991
A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formWriteFacMac.md https://vuldb.com/?ctiid.258160 https://vuldb.com/?id.258160 https://vuldb.com/?submit.301366 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2990 – Tenda FH1203 execCommand formexeCommand stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2990
A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formexeCommand.md https://vuldb.com/?ctiid.258159 https://vuldb.com/?id.258159 https://vuldb.com/?submit.301365 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2989 – Tenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2989
A vulnerability, which was classified as critical, has been found in Tenda FH1203 2.0.1.6. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Stuub/CVE-2024-29895-CactiRCE-PoC https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/fromNatStaticSetting.md https://vuldb.com/?ctiid.258158 https://vuldb.com/?id.258158 https://vuldb.com/?submit.301364 • CWE-121: Stack-based Buffer Overflow •