CVE-2024-0531 – Tenda A15 Web-based Management Interface setBlackRule stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0531
A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the component Web-based Management Interface. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to initiate the attack remotely. • https://github.com/yaoyue123/iot/blob/main/Tenda/A15/setBlackRule.md https://vuldb.com/?ctiid.250701 https://vuldb.com/?id.250701 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-51966
https://notcve.org/view.php?id=CVE-2023-51966
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. Tenda AX1803 v1.0.0.1 contiene un desbordamiento de pila a través del parámetro adv.iptv.stballvlans en la función setIptvInfo. • https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-setIptvInfo-944beaf189db4bf49f99a7a7418c7bdd • CWE-787: Out-of-bounds Write •
CVE-2023-51954
https://notcve.org/view.php?id=CVE-2023-51954
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv. Tenda AX1803 v1.0.0.1 contiene un desbordamiento de pila a través del parámetro iptv.stb.port en la función formSetIptv. • https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formSetIptv-d758f5dba8f646afaf5cddc6f8d3ec70 • CWE-787: Out-of-bounds Write •
CVE-2023-51961
https://notcve.org/view.php?id=CVE-2023-51961
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. Tenda AX1803 v1.0.0.1 contiene un desbordamiento de pila a través del parámetro adv.iptv.stballvlans en la función formGetIptv. • https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a • CWE-787: Out-of-bounds Write •
CVE-2023-51958
https://notcve.org/view.php?id=CVE-2023-51958
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. Tenda AX1803 v1.0.0.1 contiene un desbordamiento de pila a través del parámetro iptv.stb.port en la función formGetIptv. • https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a • CWE-787: Out-of-bounds Write •