Stksgg

**Name of the Vulnerable Software and Affected Versions** Tenda AC12 version 15.03.06.23 multi TD01 **Description** A buffer overflow occurs in the httpd web management interface when the `rebootTime` argument is manipulated. This issue is located within the `formSetRebootTimer()` function of the `/goform/SetSysAutoRebbotCfg` endpoint and can be triggered remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/SetSysAutoRebbotCfg` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda G0 versions prior to 20260625 **Description** A stack-based buffer overflow exists in the httpd Web Management Interface. The issue occurs within the `formSetPortMirror()` function located in the `/goform/module` file when the `portMirrorMirroredPorts` argument is manipulated. This flaw allows for remote execution of the attack. **Recommendations** Update Tenda G0 to a version released after 20260625. As a temporary mitigation, restrict access to the `formSetPortMirror()` function within the httpd Web Management Interface.

**Name of the Vulnerable Software and Affected Versions** Tenda G0 versions prior to 20260625 **Description** A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the `addStaticRoute()` function located in the `/goform/module` file. A remote attacker can trigger this by manipulating the `staticRouteNet` argument. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** Update Tenda G0 to a version released after 20260625. As a temporary mitigation, restrict access to the `addStaticRoute()` function within the httpd web management interface.

**Name of the Vulnerable Software and Affected Versions** Tenda G0 versions prior to 20260625 **Description** A buffer overflow exists in the httpd web management interface within the `/goform/module` file. The issue occurs in the `setPortMapping()` function when manipulating the `portMappingServer`, `porMappingtInternal`, or `portMappingExternal` arguments. This flaw allows a remote attacker to trigger the overflow. **Recommendations** Update Tenda G0 to a version released after 20260625. As a temporary mitigation, restrict access to the `setPortMapping()` function in the httpd web management interface.

**Name of the Vulnerable Software and Affected Versions** Tenda AC1206 version 15.03.06.23 multi TD01 **Description** A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the `set device name()` function located in the '/goform/SetOnlineDevName' endpoint when the `devName` argument is manipulated. This flaw allows a remote attacker to trigger the overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC1206 version 15.03.06.23 multi TD01 **Description** A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the `set wl guest iplist()` function located in the `/goform/WifiGuestSet` file. A remote attacker can trigger this by manipulating the `shareSpeed` argument. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-816 version 1.10CNB05 R1B011D88210 **Description** A command injection issue exists that allows a remote attacker to execute arbitrary commands. The flaw is located in the `sub 445E7C()` function within the '/goform/singlePortForward' endpoint, triggered by manipulating the `ip address` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/goform/singlePortForward' endpoint or avoid using the `ip address` parameter until a patch is available.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-816 version 1.10CNB05 R1B011D88210 **Description** A remote command injection issue exists in the `portForward()` function. By manipulating the `ip address` argument, an attacker can execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `portForward()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-816 version 1.10CNB05 R1B011D88210 **Description** A command injection flaw exists in the `/goform/formDMZ.cgi` endpoint. The issue is located within the `sub 445E7C()` function, allowing a remote attacker to execute arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.