deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-41914
Published: 2024-07-24
Description: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US; https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US
CVE: CVE-2024-7068
Published: 2024-07-24
Description: A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/update_sub_category. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272349 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/rtsjx-cve/cve/blob/main/xss2.md; https://vuldb.com/?ctiid.272349; https://vuldb.com/?id.272349
CVE: CVE-2024-22444
Published: 2024-07-24
Description: A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US; https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US
CVE: CVE-2024-31970
Published: 2024-07-24
Description: AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0[PII_REDACTED]31430 was never released to end users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31970; https://github.com/actuator/cve/blob/main/AdTran/SRG-834-5; https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332
CVE: CVE-2024-36541
Published: 2024-07-24
Description: Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://gist.github.com/HouqiyuA/f972d1c152f3b8127af01206f7c2af0d; https://gist.github.com/HouqiyuA/f972d1c152f3b8127af01206f7c2af0d
CVE: CVE-2024-40422
Published: 2024-07-24
Description: The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/alpernae/CVE-2024-40422; https://github.com/stitionai/devika; https://github.com/stitionai/devika/pull/619
CVE: CVE-2024-40575
Published: 2024-07-24
Description: An issue in Huawei Technologies opengauss (openGauss 5.0.0 build) v.7.3.0 allows a local attacker to cause a denial of service via the modification of table attributes
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://gist.github.com/RuiHuaLiu2023/92059b0fa6c625e3d39001c5a9b2dc71; https://opengauss.org; https://gist.github.com/RuiHuaLiu2023/92059b0fa6c625e3d39001c5a9b2dc71
CVE: CVE-2024-7069
Published: 2024-07-24
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employee_gatepass/classes/Master.php?f=delete_department. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272351.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/pineapple65/cve/blob/main/sql.md; https://vuldb.com/?ctiid.272351; https://vuldb.com/?id.272351
CVE: CVE-2024-7079
Published: 2024-07-24
Description: A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser() middleware function. Contrary to its name, this middleware function does not verify the validity of the user's credentials. As a result, unauthenticated users can access this endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://access.redhat.com/security/cve/CVE-2024-7079; https://bugzilla.redhat.com/show_bug.cgi?id=2299678; https://access.redhat.com/security/cve/CVE-2024-7079
CVE: CVE-2024-36539
Published: 2024-07-24
Description: Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-277
References: https://gist.github.com/HouqiyuA/c92f9ec979653dceeea947afd0b47a80; https://gist.github.com/HouqiyuA/c92f9ec979653dceeea947afd0b47a80
CVE: CVE-2024-36540
Published: 2024-07-24
Description: Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-277
References: https://gist.github.com/HouqiyuA/a4834f3c8450f9d89e2bc4d5c4beef6a; https://gist.github.com/HouqiyuA/a4834f3c8450f9d89e2bc4d5c4beef6a
CVE: CVE-2024-41110
Published: 2024-07-24
Description: Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.

Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.

A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.

Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.

docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-187, CWE-444, CWE-863
References: https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191; https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76; https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b[PII_REDACTED]
CVE: CVE-2024-41662
Published: 2024-07-24
Description: VNote is a note-taking platform. A Cross-Site Scripting (XSS) vulnerability has been identified in the Markdown rendering functionality of versions 3.18.1 and prior of the VNote note-taking application. This vulnerability allows the injection and execution of arbitrary JavaScript code through which remote code execution can be achieved. A patch for this issue is available at commit f1af78573a0ef51d6ef6a0bc4080cddc8f30a545. Other mitigation strategies include implementing rigorous input sanitization for all Markdown content and utilizing a secure Markdown parser that appropriately escapes or strips potentially dangerous content.
CVSS Score: 8.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/vnotex/vnote/commit/f1af78573a0ef51d6ef6a0bc4080cddc8f30a545; https://github.com/vnotex/vnote/security/advisories/GHSA-w655-h68w-vxxc; https://github.com/vnotex/vnote/commit/f1af78573a0ef51d6ef6a0bc4080cddc8f30a545
CVE: CVE-2024-21684
Published: 2024-07-24
Description: There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 to 8.9.12 and 8.19.0 to 8.19.1 are affected by this vulnerability. It is patched in 8.9.13 and 8.19.2.

This open redirect vulnerability, with a CVSS Score of 3.1 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N, allows an unauthenticated attacker to redirect a victim user upon login to Bitbucket Data Center to any arbitrary site which can be utilized for further exploitation which has low impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction.

Atlassian recommends that Bitbucket Data Center customers upgrade to the version. If you are unable to do so, upgrade your instance to one of the  supported fixed versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://jira.atlassian.com/browse/BSERV-19454; https://jira.atlassian.com/browse/BSERV-19454
CVE: CVE-2024-37533
Published: 2024-07-24
Description: IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine.  IBM X-Force ID:  294727.
CVSS Score: 2.4 (LOW)
CWE: CWE-359
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/294727; https://www.ibm.com/support/pages/node/7159173; https://exchange.xforce.ibmcloud.com/vulnerabilities/294727
CVE: CVE-2024-41666
Published: 2024-07-24
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD has a Web-based terminal that allows users to get a shell inside a running pod, just as they would with kubectl exec. Starting in version 2.6.0, when the administrator enables this function and grants permission to the user `p, role:myrole, exec, create, */*, allow`, even if the user revokes this permission, the user can still perform operations in the container, as long as the user keeps the terminal view open for a long time. Although the token expiration and revocation of the user are fixed, however, the fix does not address the situation of revocation of only user `p, role:myrole, exec, create, */*, allow` permissions, which may still lead to the leakage of sensitive information. A patch for this vulnerability has been released in Argo CD versions 2.11.7, 2.10.16, and 2.9.21.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-269
References: https://drive.google.com/file/d/1Fynj5Sho8Lf8CETqsNXZyPKlTDdmgJuN/view?usp=sharing; https://github.com/argoproj/argo-cd/commit/05edb2a9ca48f0f10608c1b49fbb0cf7164f6476; https://github.com/argoproj/argo-cd/commit/e96f32d233504101ddac028a5bf8117433d333d6
CVE: CVE-2024-41667
Published: 2024-07-24
Description: OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input. Although the developer intended to implement a custom URL for handling login to override the default OpenAM login, they did not restrict the `CustomLoginUrlTemplate`, allowing it to be set freely. Commit fcb8432aa77d5b2e147624fe954cb150c568e0b8 introduces `TemplateClassResolver.SAFER_RESOLVER` to disable the resolution of commonly exploited classes in FreeMarker template injection. As of time of publication, this fix is expected to be part of version 15.0.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/OpenIdentityPlatform/OpenAM/commit/fcb8432aa77d5b2e147624fe954cb150c568e0b8; https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-7726-43hg-m23v; https://github.com/OpenIdentityPlatform/OpenAM/commit/fcb8432aa77d5b2e147624fe954cb150c568e0b8
CVE: CVE-2024-41672
Published: 2024-07-24
Description: DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in filesystem is accessible for reading using `sniff_csv`, even with `enable_external_access=false`. This vulnerability provides an attacker with access to filesystem even when access is expected to be disabled and other similar functions do NOT provide access. There seem to be two vectors to this vulnerability. First, access to files that should otherwise not be allowed. Second, the content from a file can be read (e.g. `/etc/hosts`, `proc/self/environ`, etc) even though that doesn't seem to be the intent of the sniff_csv function. A fix for this issue is available in commit c9b7c98aa0e1cd7363fe8bb8543a95f38e980d8a and is expected to be part of version 1.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/duckdb/duckdb/commit/c9b7c98aa0e1cd7363fe8bb8543a95f38e980d8a; https://github.com/duckdb/duckdb/pull/13133; https://github.com/duckdb/duckdb/security/advisories/GHSA-w2gf-jxc9-pf2q
CVE: CVE-2024-36536
Published: 2024-07-24
Description: Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://gist.github.com/HouqiyuA/381f100f2ba82a8ada03994aac5bb2e8; https://gist.github.com/HouqiyuA/381f100f2ba82a8ada03994aac5bb2e8
CVE: CVE-2024-36537
Published: 2024-07-24
Description: Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: https://gist.github.com/HouqiyuA/27879a6366a65fcd5f6c6fcbcf68d8e3; https://gist.github.com/HouqiyuA/27879a6366a65fcd5f6c6fcbcf68d8e3
CVE: CVE-2024-36538
Published: 2024-07-24
Description: Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-278
References: https://gist.github.com/HouqiyuA/f06d1fa07b5287b862c1e0b288f301e5; https://gist.github.com/HouqiyuA/f06d1fa07b5287b862c1e0b288f301e5
CVE: CVE-2024-40137
Published: 2024-07-24
Description: Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution (RCE) vulnerability via the Computed field parameter under the Users Module Setup function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74
References: https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-40137; https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-40137
CVE: CVE-2024-40495
Published: 2024-07-24
Description: A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94
References: http://e2500.com; http://linksys.com; https://github.com/iotaMing/IOT-CVE/blob/master/Linksys/CVE-2024-40495/CVE-2024-40495.pdf
CVE: CVE-2024-33519
Published: 2024-07-24
Description: A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1321
References: https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt; https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt
CVE: CVE-2024-36533
Published: 2024-07-24
Description: Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1259
References: https://gist.github.com/HouqiyuA/a0e05a26ecc80bd970ac4649faecc930; https://gist.github.com/HouqiyuA/a0e05a26ecc80bd970ac4649faecc930
CVE: CVE-2024-36534
Published: 2024-07-24
Description: Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 8.4 (HIGH)
CWE: CWE-266
References: https://gist.github.com/HouqiyuA/0de688e6b874e480ddc[PII_REDACTED]50; https://gist.github.com/HouqiyuA/0de688e6b874e480ddc[PII_REDACTED]50
CVE: CVE-2024-36535
Published: 2024-07-24
Description: Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://gist.github.com/HouqiyuA/2950c3993cdeff23afcbd73ba7a33879; https://gist.github.com/HouqiyuA/2950c3993cdeff23afcbd73ba7a33879
CVE: CVE-2024-41133
Published: 2024-07-24
Description: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt; https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt
CVE: CVE-2024-41134
Published: 2024-07-24
Description: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt; https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt
CVE: CVE-2024-41135
Published: 2024-07-24
Description: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt; https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt
CVE: CVE-2024-41550
Published: 2024-07-24
Description: CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice_items.php?id= .
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-2.md; https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-2.md
CVE: CVE-2024-41551
Published: 2024-07-24
Description: CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md; https://github.com/Chencihai/Chencihai/blob/main/cve/supplier-management-system/SQLi-1.md
CVE: CVE-2024-7080
Published: 2024-07-24
Description: A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272365 was assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425, CWE-22
References: https://github.com/Xu-Mingming/cve/blob/main/bianli.md; https://vuldb.com/?ctiid.272365; https://vuldb.com/?id.272365
CVE: CVE-2024-41136
Published: 2024-07-24
Description: An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-77
References: https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt; https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04673.txt
CVE: CVE-2024-41459
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/QuickIndex/QuickIndex.md; https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/QuickIndex/QuickIndex.md
CVE: CVE-2024-41460
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/RouteStatic/README.md; https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/RouteStatic/README.md
CVE: CVE-2024-41461
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/DhcpListClient/README.md; https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/DhcpListClient/README.md
CVE: CVE-2024-41462
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/DhcpListClient2/README.md; https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/DhcpListClient2/README.md
CVE: CVE-2024-41463
Published: 2024-07-24
Description: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/addressNat/README.md; https://github.com/iotresearch/iot-vuln/blob/main/Tenda/FH1201/addressNat/README.md