CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2024-0995 – Tenda W6 httpd wifiSSIDset formwrlSSIDset stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0995
A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. • https://jylsec.notion.site/Tenda-w6-has-stack-buffer-overflow-vulnerability-in-formwrlSSIDset-e283b41905934e97b4c65632a0018eba?pvs=4 https://vuldb.com/?ctiid.252260 https://vuldb.com/?id.252260 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2024-0994 – Tenda W6 httpd setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0994
A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. • https://jylsec.notion.site/Tenda-W6-has-stack-buffer-overflow-vulnerability-in-formSetCfm-4fab28f92ca74f519245b606d8345821?pvs=4 https://vuldb.com/?ctiid.252259 https://vuldb.com/?id.252259 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-35561
https://notcve.org/view.php?id=CVE-2022-35561
A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter. Se presenta una vulnerabilidad de desbordamiento de pila en /goform/WifiMacFilterSet en Tenda W6 versión V1.0.0.9(4122), que puede ser explotada por atacantes para causar una denegación de servicio (DoS) por medio del parámetro index. • https://github.com/ilovekeer/IOT/tree/main/Tenda/W6/stackoverflow/WifiMacFilterSet • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-35560
https://notcve.org/view.php?id=CVE-2022-35560
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter. Se presenta una vulnerabilidad de desbordamiento de pila en /goform/wifiSSIDset en Tenda W6 versión V1.0.0.9(4122), que puede ser explotada por atacantes para causar una denegación de servicio (DoS) por medio del parámetro index. • https://github.com/ilovekeer/IOT/tree/main/Tenda/W6/stackoverflow/wifiSSIDset • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-35559
https://notcve.org/view.php?id=CVE-2022-35559
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution. Se presenta una vulnerabilidad de desbordamiento de pila en /goform/setAutoPing en Tenda W6 versión V1.0.0.9(4122), que permite a un atacante construir los parámetros ping1 y ping2 para un ataque de desbordamiento de pila. Un atacante puede usar esta vulnerabilidad para ejecutar código arbitrario. • https://github.com/ilovekeer/IOT/tree/main/Tenda/W6/stackoverflow/formSetAutoPing • CWE-787: Out-of-bounds Write •