CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2024-2810 – Tenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2810
22 Mar 2024 — A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as critical. Affected by this vulnerability is the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/formWifiWpsOOB.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2024-2809 – Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2809
22 Mar 2024 — A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20_multi. Affected is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/formSetFirewallCfg.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 2CVE-2024-2808 – Tenda AC15 QuickIndex formQuickIndex stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2808
22 Mar 2024 — A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20_multi. This issue affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/skyler-ferrante/CVE-2024-28085 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2024-2807 – Tenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2807
22 Mar 2024 — A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi. This vulnerability affects the function formExpandDlnaFile of the file /goform/expandDlnaFile. The manipulation of the argument filePath leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/formExpandDlnaFile.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2024-2806 – Tenda AC15 addWifiMacFilter stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2806
22 Mar 2024 — A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20_multi. This affects the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceId/deviceMac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/addWifiMacFilter_deviceId.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2805 – Tenda AC15 SetSpeedWan formSetSpeedWan stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2805
22 Mar 2024 — A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been rated as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be launched remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/SetSpeedWan.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-39673
https://notcve.org/view.php?id=CVE-2023-39673
18 Aug 2023 — Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). Se ha descubierto que Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 contiene un desbordamiento de búfer a través de la función FUN_00010e34(). • https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC15%20Impoper%20Input%20Validation.md • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-30369
https://notcve.org/view.php?id=CVE-2023-30369
24 Apr 2023 — Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. • https://github.com/2205794866/Tenda/blob/main/AC15/3.md • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-30370
https://notcve.org/view.php?id=CVE-2023-30370
24 Apr 2023 — In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. • https://github.com/2205794866/Tenda/blob/main/AC15/7.md • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-30371
https://notcve.org/view.php?id=CVE-2023-30371
24 Apr 2023 — In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. • https://github.com/2205794866/Tenda/blob/main/AC15/4.md • CWE-787: Out-of-bounds Write •