CVE-2024-0922 – Tenda AC10U formQuickIndex stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0922
A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this vulnerability is the function formQuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yaoyue123/iot/blob/main/Tenda/AC10U/formQuickIndex.md https://vuldb.com/?ctiid.252127 https://vuldb.com/?id.252127 • CWE-121: Stack-based Buffer Overflow •
CVE-2024-0535 – Tenda PA6 httpd portmap cgiPortMapAdd stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0535
A vulnerability classified as critical was found in Tenda PA6 1.0.1.21. Affected by this vulnerability is the function cgiPortMapAdd of the file /portmap of the component httpd. The manipulation of the argument groupName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/jylsec/vuldb/blob/main/Tenda/PA6/2/README.md https://vuldb.com/?ctiid.250705 https://vuldb.com/?id.250705 • CWE-121: Stack-based Buffer Overflow •
CVE-2023-44013
https://notcve.org/view.php?id=CVE-2023-44013
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function. Se descubrió que Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 contenía un desbordamiento de la pila de memoria a través del parámetro list en la función fromSetIpMacBind. • https://github.com/aixiao0621/Tenda/blob/main/AC10U/0/0.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •
CVE-2023-44014
https://notcve.org/view.php?id=CVE-2023-44014
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters. Se descubrió que Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 contenía múltiples desbordamientos de la pila de memoria en la función formSetMacFilterCfg a través de los parámetros macFilterType y deviceList. • https://github.com/aixiao0621/Tenda/blob/main/AC10U/1/0.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •
CVE-2023-44015
https://notcve.org/view.php?id=CVE-2023-44015
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function. Se descubrió que Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 contenía un desbordamiento de la pila de memoria a través del parámetro schedEndTime en la función setSchedWifi. • https://github.com/aixiao0621/Tenda/blob/main/AC10U/8/0.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •