Peanuts

The issue is related to multiple vulnerabilities in the web interface management of the affected routers, which could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. The vulnerability is associated with errors in processing input data, potentially allowing a remote attacker to execute arbitrary code in the context of the root user or cause a denial of service.

The issue is related to a heap overflow in the httpd module when handling the `/goform/saveParentControlInfo` API endpoint, specifically due to the `saveParentControlInfo()` function's handling of the `deviceId` parameter. This can allow a remote attacker to cause a denial of service or execute arbitrary code.

The issue is related to a stack-based buffer overflow vulnerability in the `form fast setting wifi set()` function of the Tenda AC18 router's firmware. This vulnerability is caused by an out-of-bounds write operation when processing the `ssid` parameter. Exploitation of this issue could allow a remote attacker to cause a denial of service.

The issue is related to a stack-based buffer overflow vulnerability in the `fromAddressNat()` function of the Tenda AC18 router's firmware. This vulnerability occurs when handling the `entrys` and `mitInterface` parameters, allowing an attacker to potentially cause a denial of service or execute arbitrary code remotely.

The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router when handling the /goform/SetFirewallCfg request. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.

The issue is related to a stack-based buffer overflow in the httpd module when handling the "/goform/WifiExtraSet" API endpoint. This can potentially allow an attacker to cause a denial of service.

The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router AC18. This occurs when handling the "/goform/SetClientState" request. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

A stack buffer overflow was discovered in the wifiBasicCfg module, allowing attackers to cause a Denial of Service (DoS) via crafted overflow data.

The issue is a stack buffer overflow in the file /etc/wpa supplicant.conf, which allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

A buffer overflow issue was discovered in the function sub 3226AC via the `TIMEZONE` variable, allowing attackers to cause a Denial of Service (DoS) via crafted overflow data.

The issue is related to a stack buffer overflow in the PPPoE module, which can be exploited by attackers to cause a Denial of Service (DoS) via crafted overflow data.

A stack buffer overflow was discovered in the wifiTime module, allowing attackers to cause a Denial of Service (DoS) via crafted overflow data.

The issue is related to a stack buffer overflow in the onlineList module, allowing attackers to cause a Denial of Service (DoS) via crafted overflow data.

A stack buffer overflow was discovered in the wanBasicCfg module, allowing attackers to cause a Denial of Service (DoS) via crafted overflow data.

The upnpd service on certain NETGEAR devices allows remote attackers to execute arbitrary code via a stack-based buffer overflow. This issue can be exploited by attackers on the local area network (LAN).