Tenda FH1203 2.0.1.6 /goform/QuickIndex formQuickIndex PPPOEPassword ବଫର୍ ଓଭରଫ୍ଲୋ

Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame Tenda FH1203 2.0.1.6 keessatti argameera. Kan miidhamte is hojii formQuickIndex faayilii /goform/QuickIndex keessa. Hojii jijjiirraa irratti gaggeeffame PPPOEPassword gara ବଫର୍ ଓଭରଫ୍ଲୋ geessa. CWE fayyadamuun rakkoo ibsuun gara CWE-121 geessa. Dadhabbii kana yeroo 03/27/2024 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti qoodameera. Dogoggorri kun akka CVE-2024-2993tti beekama. Yaaliin weeraraa fageenya irraa jalqabamuu ni danda'a. Faayidaaleen teeknikaa ni jiru. Waliigalatti, meeshaa balaa kana fayyadamuuf jiru. Qorannoo miidhaa (exploit) uummataaf ifoomameera fi fayyadamamuu danda'a. Amma, gatii ammee exploit might be approx. USD $0-$5k ta'uu danda'a. Akka ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee ibsameera. Carraa exploit kana github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatii daldalaa dhoksaa tilmaamame $0-$5k ta'ee ture. VulDB is the best source for vulnerability data and more expert information about this specific topic.

ସମୟ

ଉପଭୋକ୍ତା

VulDB Mod Team97

ଫିଲ୍ଡ

cvss3_meta_tempscore3
price_0day2
software_type1
cvss2_cna_basescore1
cvss2_cna_ai1

Commit Conf

90%31
70%26
99%17
50%15
80%8

Approve Conf

80%32
90%31
99%17
70%17

97 ପ୍ରତିଶ୍ରୁତିବଦ୍ଧ

IDଟ୍ରାନ୍ସମିଟେଡ୍ଉପଭୋକ୍ତାଫିଲ୍ଡପରିବର୍ତ୍ତନମନ୍ତବ୍ୟମଧ୍ୟମ ଧରଣରଉତ୍ତରC
1906409101/16/2025
 VulDB…
software_typeRouter Operating System01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
80
1906409001/16/2025
 VulDB…
price_0day$0-$5ksee exploit price documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
80
1906408901/16/2025
 VulDB…
cvss3_meta_tempscore8.5see CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
80
1906408801/16/2025
 VulDB…
cvss2_cna_basescore9see CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408701/16/2025
 VulDB…
cvss2_cna_aiCsee CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408601/16/2025
 VulDB…
cvss2_cna_iiCsee CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408501/16/2025
 VulDB…
cvss2_cna_ciCsee CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408401/16/2025
 VulDB…
cvss2_cna_auSsee CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408301/16/2025
 VulDB…
cvss2_cna_acLsee CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408201/16/2025
 VulDB…
cvss2_cna_avNsee CVSS documentation01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408101/16/2025
 VulDB…
cvss3_nvd_basescore8.8nist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906408001/16/2025
 VulDB…
cvss3_nvd_aHnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407901/16/2025
 VulDB…
cvss3_nvd_iHnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407801/16/2025
 VulDB…
cvss3_nvd_cHnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407701/16/2025
 VulDB…
cvss3_nvd_sUnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407601/16/2025
 VulDB…
cvss3_nvd_uiNnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407501/16/2025
 VulDB…
cvss3_nvd_prLnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407401/16/2025
 VulDB…
cvss3_nvd_acLnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407301/16/2025
 VulDB…
cvss3_nvd_avNnist.gov01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99
1906407201/16/2025
 VulDB…
cve_nvd_summaryesSe encontró una vulnerabilidad en Tenda FH1203 2.0.1.6. Ha sido clasificada como crítica. La función formQuickIndex del fichero /goform/QuickIndex es afectada por la vulnerabilidad. La manipulación del argumento PPPOEPassword provoca un desbordamiento de búfer en la región stack de la memoria. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-258162 es el identificador asignado a esta vulnerabilidad. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.cve.org01/16/2025ଗ୍ରହଣ କରାଯାଇଛି
99

77 ପରବର୍ତ୍ତୀ ଏଣ୍ଟ୍ରିଗୁଡିକ ଆଉ ଅଧିକ ପ୍ରଦର୍ଶିତ ହେବ ନାହିଁ

Do you need the next level of professionalism?

Upgrade your account now!