Vulnerabilidades

Tenda F3 V12.01.01.48_multi y posteriores es vulnerable a desbordamiento de búfer a través del parámetro macFilterList en goform/setNAT.

Tenda F3 V12.01.01.48_multi y posterior es vulnerable a desbordamiento de búfer a través del parámetro QosList en goform/setQoS.

Tenda F3 V12.01.01.48_multi y posterior es vulnerable a desbordamiento de búfer a través del parámetro portList en /goform/setNAT.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.

Se determinó una vulnerabilidad en Tenda CP6 11.10.00.243. El elemento afectado es la función sub_2B7D04 del componente uhttp. La ejecución de manipulación puede conducir a un algoritmo criptográfico arriesgado. El ataque puede lanzarse remotamente. Este ataque se caracteriza por una alta complejidad. La…

Se identificó una vulnerabilidad en Tenda CH22 1.0.0.1. Este problema afecta a la función formSetSambaConf del archivo /goform/SetSambaConf. La manipulación del argumento samba_userNameSda conduce a un desbordamiento de búfer. Es posible iniciar el ataque de forma remota. El exploit está disponible públicamente y…

Se determinó una vulnerabilidad en Tenda CH22 1.0.0.1. Esta vulnerabilidad afecta a la función formexeCommand del archivo /goform/exeCommand. La manipulación del argumento cmdinput puede conducir a un desbordamiento de búfer. El ataque puede realizarse de forma remota. El exploit ha sido divulgado públicamente y puede…

Una vulnerabilidad se determinó en Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Afectada es una función desconocida del archivo /etc_ro/shadow del componente Interfaz Administrativa. Esta manipulación con la entrada Fireitup causa credenciales codificadas de forma rígida. El ataque solo puede ser ejecutado localmente. Un…