CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2987 – Tenda FH1202 GetParentControlInfo stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2987
A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/GetParentControlInfo.md https://vuldb.com/?ctiid.258156 https://vuldb.com/?id.258156 https://vuldb.com/?submit.301285 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2986 – Tenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2986
A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be initiated remotely. • https://github.com/DEVisions/CVE-2024-29868 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/SetSpeedWan.md https://vuldb.com/?ctiid.258155 https://vuldb.com/?id.258155 https://vuldb.com/?submit.301284 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2985 – Tenda FH1202 QuickIndex formQuickIndex stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2985
A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely. • https://github.com/sinsinology/CVE-2024-29855 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formQuickIndex.md https://vuldb.com/?ctiid.258154 https://vuldb.com/?id.258154 https://vuldb.com/?submit.301276 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2984 – Tenda FH1202 setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2984
A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been classified as critical. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. • https://github.com/sinsinology/CVE-2024-29849 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formSetCfm.md https://vuldb.com/?ctiid.258153 https://vuldb.com/?id.258153 https://vuldb.com/?submit.301275 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2983 – Tenda FH1202 SetClientState formSetClientState stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2983
A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formSetClientState.md https://vuldb.com/?ctiid.258152 https://vuldb.com/?id.258152 https://vuldb.com/?submit.301274 • CWE-121: Stack-based Buffer Overflow •