Tenda Fh1206 Firmware vulnerabilities

CVE-2024-44386 [HIGH] CWE-121 CVE-2024-44386: Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBi Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.

CVE-2024-42973 [HIGH] CWE-787 CVE-2024-42973: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42969 [HIGH] CWE-787 CVE-2024-42969: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42976 [HIGH] CWE-787 CVE-2024-42976: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42984 [HIGH] CWE-787 CVE-2024-42984: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42980 [HIGH] CWE-787 CVE-2024-42980: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42982 [HIGH] CWE-787 CVE-2024-42982: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42985 [HIGH] CWE-787 CVE-2024-42985: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42974 [HIGH] CWE-787 CVE-2024-42974: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42979 [HIGH] CWE-787 CVE-2024-42979: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the f Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42968 [HIGH] CWE-787 CVE-2024-42968: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fro Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42986 [HIGH] CWE-787 CVE-2024-42986: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42983 [HIGH] CWE-787 CVE-2024-42983: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in th Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42977 [HIGH] CWE-787 CVE-2024-42977: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fr Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-42981 [HIGH] CWE-787 CVE-2024-42981: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-12002 [MEDIUM] CWE-404 CVE-2024-12002: A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed t

CVE-2024-34946 [MEDIUM] CWE-121 CVE-2024-34946: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.

CVE-2024-33213 [MEDIUM] CWE-121 CVE-2024-33213: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic.

CVE-2024-44387 [MEDIUM] CWE-787 CVE-2024-44387: Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtr Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.