iotresearch/iot-vuln

Releases0

Stars4

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-41468 ↗	Jul 25, 2024Thursday, 25 July 2024, 22:15	9.8 CRITICAL	—
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand
CVE-2024-41473 ↗	Jul 25, 2024Thursday, 25 July 2024, 22:15	9.8 CRITICAL	—
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
CVE-2024-41459 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	9.8 CRITICAL	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
CVE-2024-41460 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	9.8 CRITICAL	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
CVE-2024-41461 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	9.8 CRITICAL	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
CVE-2024-41462 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	7.5 HIGH	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
CVE-2024-41463 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	7.5 HIGH	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.
CVE-2024-41464 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	7.5 HIGH	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic
CVE-2024-41465 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	7.5 HIGH	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.
CVE-2024-41466 ↗	Jul 24, 2024Wednesday, 24 July 2024, 21:15	7.5 HIGH	—
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.