CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 1CVE-2024-11650 – Tenda i9 GetIPTV websReadEvent null pointer dereference
https://notcve.org/view.php?id=CVE-2024-11650
25 Nov 2024 — A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/xiaobor123/tenda-vul-i9 • CWE-404: Improper Resource Shutdown or Release CWE-476: NULL Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2024-0996 – Tenda i9 httpd setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0996
29 Jan 2024 — A vulnerability classified as critical has been found in Tenda i9 1.0.0.9(4122). This affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://jylsec.notion.site/Tenda-i9-has-stack-buffer-overflow-vulnerability-in-formSetCfm-c1bd9745c81e4207aceeaa1ba5e10563?pvs=4 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40106
https://notcve.org/view.php?id=CVE-2022-40106
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función set_local_time. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_set_local_time.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40107
https://notcve.org/view.php?id=CVE-2022-40107
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formexeCommand. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formexeCommand.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40105
https://notcve.org/view.php?id=CVE-2022-40105
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formWifiMacFilterGet. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterGet.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40104
https://notcve.org/view.php?id=CVE-2022-40104
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formwrlSSIDget. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDget.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40102
https://notcve.org/view.php?id=CVE-2022-40102
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formwrlSSIDset. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDset.md • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40103
https://notcve.org/view.php?id=CVE-2022-40103
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formSetAutoPing. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formSetAutoPing.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40101
https://notcve.org/view.php?id=CVE-2022-40101
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene un desbordamiento de búfer por medio de la función formWifiMacFilterSet. Esta vulnerabilidad permite a atacantes causar una Denegación de Servicio (DoS) por medio de una cadena diseñada. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterSet.md • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2022-40100
https://notcve.org/view.php?id=CVE-2022-40100
23 Sep 2022 — Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function. Se ha detectado que Tenda i9 versión v1.0.0.8(3828) contiene una vulnerabilidad de inyección de comandos por medio de la función FormexeCommand. • https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/Command_Injection_formexeCommand.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •