Tenda W15E Firmware 15.11.0.14

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda W15E guestWifiRuleRefresh stack-based overflow

Tenda W15E SetSysTimeCfg formSetSysTime stack-based overflow

Tenda W15E setStaticRoute formSetStaticRoute stack-based overflow

Tenda W15E delIpMacBind formIPMacBindDel stack-based overflow

Tenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

Tenda W15E SetPortMapping formSetPortMapping stack-based overflow

Tenda W15E setDebugCfg formSetDebugCfg stack-based overflow

Tenda W15E formQOSRuleDel stack-based overflow

Tenda W15E modifyIpMacBind formIPMacBindModify stack-based overflow

Tenda W15E addIpMacBind formIPMacBindAdd stack-based overflow

Tenda W15E DelPortMapping formDelPortMapping stack-based overflow

Tenda W15E DelDhcpRule formDelDhcpRule stack-based overflow

Tenda W15E AddDnsForward formAddDnsForward stack-based overflow

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.