Peris-Navince

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-816A2 version FWv1.10CNB05 **Description** The D-Link DIR-816A2 firmware version FWv1.10CNB05 contains a stack overflow issue. This occurs through the `statuscheckpppoeuser` parameter within the `dir setWanWifi` function. A crafted input to this parameter can lead to a Denial of Service (DoS). The `statuscheckpppoeuser` parameter is vulnerable. The `dir setWanWifi` function is vulnerable. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC500 version 2.0.1.9 **Description** A Buffer Overflow issue allows a remote attacker to cause a denial of service via the `port` parameter at the "goform/setVlanInfo" component. **Recommendations** For Tenda AC500 version 2.0.1.9, consider restricting access to the "goform/setVlanInfo" component to minimize the risk of exploitation. Avoid using the `port` parameter in this component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn **Description** A stack overflow issue was discovered via the `macFilterType` and `deviceList` parameters at the "/goform/setMacFilterCfg" API endpoint. This issue affects the Tenda AC10 v4 router. **Recommendations** For Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn, as a temporary workaround, consider restricting access to the "/goform/setMacFilterCfg" API endpoint until a patch is available. Avoid using the `macFilterType` and `deviceList` parameters in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.