FirmRec/IoT-Vulns

GitHub

github.com

Releases0

Stars14

This repository contain recurring IoT vulnerabilities found by FirmRec.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-38933 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
CVE-2023-38932 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.
CVE-2023-38934 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.
CVE-2023-38940 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-38939 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function.
CVE-2023-38938 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.
CVE-2023-38937 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
CVE-2023-38936 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-38935 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.
CVE-2023-39550 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
CVE-2023-38931 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.
CVE-2023-38412 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.
CVE-2023-36499 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.
CVE-2023-38930 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVE-2023-38929 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer.
CVE-2023-38928 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	9.8 CRITICAL	—
Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi.
CVE-2023-38926 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.
CVE-2023-38925 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi.
CVE-2023-38924 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	6.5 MEDIUM	—
Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.
CVE-2023-38922 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
CVE-2023-38921 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip parameters.
CVE-2023-38591 ↗	Aug 7, 2023Monday, 7 August 2023, 19:15	8.8 HIGH	—
Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi.
CVE-2023-37723 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.
CVE-2023-37714 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.
CVE-2023-37722 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.
CVE-2023-37721 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.
CVE-2023-37719 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.
CVE-2023-37718 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.
CVE-2023-37717 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.
CVE-2023-37716 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.
CVE-2023-37715 ↗	Jul 14, 2023Friday, 14 July 2023, 00:15	9.8 CRITICAL	—
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm.
CVE-2023-37711 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.
CVE-2023-37712 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function.
CVE-2023-37710 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
CVE-2023-37707 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function.
CVE-2023-37706 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the fromAddressNat function.
CVE-2023-37705 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function.
CVE-2023-37704 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
CVE-2023-37703 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-37702 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.
CVE-2023-37701 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVE-2023-37700 ↗	Jul 10, 2023Monday, 10 July 2023, 17:15	9.8 CRITICAL	—
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-31700 ↗	May 17, 2023Wednesday, 17 May 2023, 14:15	8.8 HIGH	—
TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.
CVE-2023-31701 ↗	May 17, 2023Wednesday, 17 May 2023, 14:15	8.8 HIGH	—
TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.