CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 1CVE-2024-11650 – Tenda i9 GetIPTV websReadEvent null pointer dereference
https://notcve.org/view.php?id=CVE-2024-11650
A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/xiaobor123/tenda-vul-i9 https://vuldb.com/?ctiid.285971 https://vuldb.com/?id.285971 https://vuldb.com/?submit.446592 https://www.tenda.com.cn • CWE-404: Improper Resource Shutdown or Release CWE-476: NULL Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2024-0996 – Tenda i9 httpd setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0996
A vulnerability classified as critical has been found in Tenda i9 1.0.0.9(4122). This affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://jylsec.notion.site/Tenda-i9-has-stack-buffer-overflow-vulnerability-in-formSetCfm-c1bd9745c81e4207aceeaa1ba5e10563?pvs=4 https://vuldb.com/?ctiid.252261 https://vuldb.com/?id.252261 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40106
https://notcve.org/view.php?id=CVE-2022-40106
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función set_local_time. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_set_local_time.md • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40107
https://notcve.org/view.php?id=CVE-2022-40107
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formexeCommand. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formexeCommand.md • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40105
https://notcve.org/view.php?id=CVE-2022-40105
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formWifiMacFilterGet. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterGet.md • CWE-787: Out-of-bounds Write •