Hhsw34

**Name of the Vulnerable Software and Affected Versions** Tenda A21 version 1.0.0.0 **Description** A security flaw exists in Tenda A21 version 1.0.0.0. The issue is a stack-based buffer overflow in the `set qosMib list` function located in the file `/goform/formSetQosBand`. The vulnerability is triggered by manipulating the `list` argument and can be exploited remotely. A public exploit is available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda A21 version 1.0.0.0 **Description** A flaw exists in Tenda A21 version 1.0.0.0 related to the `set device name` function within the `/goform/SetOnlineDevName` file. Manipulation of the `devName` argument can trigger a stack-based buffer overflow, allowing for remote exploitation. The exploit has been publicly released. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `/goform/SetOnlineDevName` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda A21 version 1.0.0.0 **Description** A stack-based buffer overflow exists in the `form fast setting wifi set` function located in the `/goform/fast setting wifi set` file. Manipulation of the `ssid` argument can trigger the overflow, allowing for remote attacks. The exploit has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda A21 version 1.0.0.0 **Description** A security issue exists in the Tenda A21 router. The issue is a stack-based buffer overflow in the MAC Filtering Configuration Endpoint, specifically within the `set device name` function located in the /goform/setBlackRule file. Manipulation of the `devName`/`mac` argument can trigger the overflow. This can be exploited remotely. The exploit has been publicly disclosed. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda A21 version 1.0.0.0 **Description** A stack-based buffer overflow exists in the `fromSetIpMacBind` function within the `/goform/SetIpMacBind` API endpoint of the Tenda A21 router. Manipulation of the argument list to this function can trigger the overflow, allowing for remote code execution or a denial-of-service condition. The exploit for this issue has been publicly released. **Recommendations** Versions prior to 1.0.0.0 are recommended. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda A21 version 1.0.0.0 **Description** A stack-based buffer overflow exists in the `setSchedWifi` function of the `/goform/openSchedWifi` file. Manipulation of the `schedStartTime` and `schedEndTime` arguments can trigger this issue. The attack can be initiated remotely. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DWR-M961 version 1.1.47 **Description** A flaw exists in D-Link DWR-M961 version 1.1.47 that allows for command injection. This issue is related to the `sub 419920` function within the `/boafrm/formLtefotaUpgradeQuectel` file. Manipulation of the `fota url` argument can lead to remote code execution. An exploit for this issue has been published. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/boafrm/formLtefotaUpgradeQuectel` file. Avoid using the `fota url` parameter until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** D-Link DWR-M961 version 1.1.47 **Description** A flaw exists in the SMS Message component of D-Link DWR-M961 version 1.1.47. Specifically, the `sub 4250E0` function within the `/boafrm/formSmsManage` file is susceptible to command injection. This occurs through manipulation of the `action value` argument, allowing for remote execution of commands. The exploit for this issue is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DWR-M961 version 1.1.47 **Description** A security issue exists in D-Link DWR-M961 version 1.1.47. Manipulation of the `fota url` argument within an unknown function of the `/boafrm/formLtefotaUpgradeFibocom` file can lead to command injection. This allows for remote attacks. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AX12 Pro V2 version 16.03.49.24 cn **Description** A flaw exists in the Telnet Service component of the software that allows for the retrieval of hard-coded credentials. Successful exploitation of this issue grants full remote control. The attack requires a high degree of complexity and is considered difficult to execute. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sangfor Operation and Maintenance Security Management System versions through 3.0.12 **Description** A flaw exists in the Sangfor Operation and Maintenance Security Management System. The issue is due to a command injection vulnerability within the `portValidate` function, located in the `/fort/ip and port/port validate` file of the HTTP POST Request Handler component. Manipulating the `port` argument can lead to command injection. This can be triggered remotely. The exploit has been made public. **Recommendations** Versions prior to 3.0.12 should be updated.

**Name of the Vulnerable Software and Affected Versions** Sangfor Operation and Maintenance Security Management System versions up to 3.0.12 **Description** A flaw exists in Sangfor Operation and Maintenance Security Management System. The issue is due to command injection within the HTTP POST Request Handler component, specifically related to the `/fort/audit/get clip img` file. Manipulation of the `frame/dirno` argument can lead to remote code execution. The exploit details have been publicly disclosed. **Recommendations** Versions prior to 3.0.12 should be updated.

**Name of the Vulnerable Software and Affected Versions** Sangfor Operation and Maintenance Security Management System versions up to 3.0.12 **Description** A flaw exists in the Sangfor Operation and Maintenance Security Management System that could allow for remote command injection. The issue is located within the HTTP POST Request Handler component, specifically in the `getInformation` function of the file '/equipment/get Information'. Manipulation of the `fortEquipmentIp` argument can lead to unauthorized command execution. The exploit has been publicly disclosed. **Recommendations** Versions prior to 3.0.12 should be updated.

**Nome do Software Vulnerável e Versões Afetadas** Sistema de Gerenciamento de Operações e Manutenção Sangfor versões até a 3.0.8 **Descrição** Existe uma falha de segurança no Sistema de Gerenciamento de Operações e Manutenção Sangfor. O problema envolve upload de arquivos sem restrições devido à manipulação do argumento `File` dentro de uma função desconhecida do arquivo `/fort/trust/version/common/common.jsp`. Isso permite exploração remota. O exploit foi divulgado publicamente. O fornecedor foi notificado, mas não respondeu. **Recomendações** Versões anteriores à 3.0.8 devem ser atualizadas. Como medida de contorno temporária, restrinja o acesso ao arquivo `/fort/trust/version/common/common.jsp`. Evite fazer upload de arquivos não confiáveis para o sistema.

**Nome do Software Vulnerável e Versões Afetadas** D-Link DIR-822K versões 1.00 20250513164613 até 1.1.50 D-Link DWR-M920 versões 1.00 20250513164613 até 1.1.50 **Descrição** Existe uma falha nos roteadores D-Link DIR-822K e DWR-M920. O problema está relacionado à manipulação do argumento `submit-url` no arquivo /boafrm/formDdns, levando à corrupção de memória. O ataque pode ser iniciado remotamente. Um exploit para este problema foi publicado. **Recomendações** Atualize o D-Link DIR-822K das versões 1.00 20250513164613 até 1.1.50 para uma versão mais recente. Atualize o D-Link DWR-M920 das versões 1.00 20250513164613 até 1.1.50 para uma versão mais recente.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 **Description** A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 routers. The issue is related to the manipulation of the `submit-url` argument within an unknown function of the `/boafrm/formWlEncrypt` file. This allows for a remote attack. The exploit for this issue has been publicly released. **Recommendations** For D-Link DIR-822K version 1.00 20250513164613, update to a newer version that contains a fix for this vulnerability. For D-Link DIR-822K version 1.1.50, update to a newer version that contains a fix for this vulnerability. For D-Link DWR-M920 version 1.00 20250513164613, update to a newer version that contains a fix for this vulnerability. For D-Link DWR-M920 version 1.1.50, update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 **Description** A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 routers. The issue is located in an unknown function within the `/boafrm/formWanConfigSetup` file. Manipulation of the `submit-url` argument can trigger the buffer overflow, allowing for remote attacks. A publicly available exploit exists, potentially enabling malicious actors to compromise affected devices. **Recommendations** D-Link DIR-822K version 1.00 20250513164613: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DIR-822K version 1.1.50: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DWR-M920 version 1.00 20250513164613: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DWR-M920 version 1.1.50: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do Software Vulnerável e Versões Afetadas** D-Link DIR-822K versões 1.00 20250513164613 e 1.1.50 D-Link DWR-M920 versões 1.00 20250513164613 e 1.1.50 **Descrição** Existe uma vulnerabilidade de estouro de buffer nos dispositivos D-Link DIR-822K e DWR-M920. O problema deve-se à manipulação do argumento `submit-url` dentro do arquivo `/boafrm/formVpnConfigSetup`. A exploração desta vulnerabilidade pode ser realizada remotamente através da função `formVpnConfigSetup`. Um exploit público está disponível. **Recomendações** Para o D-Link DIR-822K versão 1.00 20250513164613, restrinja o acesso ao arquivo `/boafrm/formVpnConfigSetup`. Para o D-Link DIR-822K versão 1.1.50, restrinja o acesso ao arquivo `/boafrm/formVpnConfigSetup`. Para o D-Link DWR-M920 versão 1.00 20250513164613, restrinja o acesso ao arquivo `/boafrm/formVpnConfigSetup`. Para o D-Link DWR-M920 versão 1.1.50, restrinja o acesso ao arquivo `/boafrm/formVpnConfigSetup`.

**Nome do Software Vulnerável e Versões Afetadas** D-Link DIR-822K versão 1.00 **Descrição** Existe uma vulnerabilidade de estouro de buffer na função `sub 455524` do arquivo `/boafrm/formNtp`. A manipulação do parâmetro `submit-url` pode acionar esta vulnerabilidade, potencialmente permitindo exploração remota. O exploit foi divulgado publicamente. **Recomendações** Até o momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Nome do Software Vulnerável e Versões Afetadas** D-Link DIR-822K versões 1.00 20250513164613 D-Link DWR-M920 versões 1.00 20250513164613 e 1.1.50 **Descrição** Existe uma vulnerabilidade de buffer overflow nos dispositivos D-Link DIR-822K e DWR-M920. O problema está localizado no arquivo `/boafrm/formFirewallAdv`. A manipulação do argumento `submit-url` pode acionar o estouro de buffer. Isso pode ser explorado remotamente. O exploit foi divulgado publicamente. **Recomendações** Atualize o D-Link DIR-822K versão 1.00 20250513164613 para uma versão mais recente. Atualize o D-Link DWR-M920 versões 1.00 20250513164613 e 1.1.50 para uma versão mais recente.