Ysnysn0121

A remote command injection issue exists in the `formcreateFileName()` function within the `/goform/formcreateFileName` file. This occurs when the `fileNameMit` argument is manipulated, allowing an attacker to execute arbitrary commands on the system.

A remote command injection issue exists in the `/goform/CertListInfo` endpoint. The flaw occurs within the `formCertListInfo()` function when processing the `Name` argument, allowing an attacker to execute arbitrary commands on the system.

A remote buffer overflow occurs when manipulating the `Name` argument within the `formCertListInfo()` function of the '/goform/CertListInfo' endpoint. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially leading to crashes or unauthorized code execution.

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A critical vulnerability exists in the HTTP POST Request Handler component of the affected product. The `fromSafeUrlFilter` function within the `/goform/fromSafeUrlFilter` file is susceptible to a buffer overflow. This occurs through the manipulation of the `page` argument, allowing for remote exploitation. The exploit for this issue has been publicly disclosed. Recommendations: Tenda FH1201 version 1.2.0.14: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A critical vulnerability has been found in the function `fromadvsetlanip` of the file `/goform/AdvSetLanip` of the component POST Request Handler. The manipulation of the argument `lanMask` leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A critical issue affects the `setWiFiRepeaterCfg` function of the `/cgi-bin/cstecgi.cgi` file in the POST Request Handler component. The manipulation of the `Password` argument leads to a buffer overflow. This issue can be exploited remotely, and the exploit has been disclosed to the public.

A problematic issue was found, affecting an unknown part of the system. The manipulation leads to cross-site request forgery, which can be initiated remotely.

A critical vulnerability was found in the Tenda AC15 router, specifically affecting the `formSetPPTPUserList` function of the `/goform/setPptpUserList` file in the HTTP POST Request Handler component. The manipulation of the `list` argument leads to a buffer overflow. This issue can be exploited remotely, and the exploit has been publicly disclosed.