Xyqer1

**Name of the Vulnerable Software and Affected Versions** dlink DIR 832x version 240802 **Description** The issue allows a remote attacker to execute arbitrary code via the function 0x417234. **Recommendations** For dlink DIR 832x version 240802, as a temporary workaround, consider disabling the function 0x417234 until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V4.0si V16.03.10.20 **Description** The issue is related to a Buffer Overflow in AdvSetMacMtuWan via `wanSpeed2`. This allows for potential exploitation. **Recommendations** For Tenda AC10 version V4.0si V16.03.10.20, consider disabling the `AdvSetMacMtuWan` function until a patch is available to prevent the Buffer Overflow via `wanSpeed2`. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V4.0si V16.03.10.20 **Description** The issue is related to a Buffer Overflow in AdvSetMacMtuWan via `wanMTU2`. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider disabling the `AdvSetMacMtuWan` function via `wanMTU2` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ALFA CAMPRO-co version 2.29 **Description** A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the `newap text 0` key value. This enables the attacker to potentially gain control over the system. **Recommendations** For ALFA CAMPRO-co version 2.29, consider restricting access to the `newap text 0` key value until a patch is available. As a temporary workaround, avoid using the `newap text 0` key value in sensitive operations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ALFA WiFi CampPro router version ALFA CAMPRO-co-2.29 **Description** A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the `GAPSMinute3` key value. This enables the attacker to potentially gain control over the affected device. **Recommendations** For version ALFA CAMPRO-co-2.29, as a temporary workaround, consider restricting access to the `GAPSMinute3` key value until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ALFA WiFi CampPro router version ALFA CAMPRO-co-2.29 **Description** The issue allows a remote attacker to execute arbitrary code via the `hiddenIndex` in the `StorageEditUser` function. This enables the attacker to potentially gain control over the affected device. **Recommendations** For version ALFA CAMPRO-co-2.29, as a temporary workaround, consider disabling the `StorageEditUser` function until a patch is available. Restrict access to the `hiddenIndex` parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dlink DIR 832x version 240802 **Description** The issue allows a remote attacker to execute arbitrary code via the `macaddr` key value to the function `0x42232c`. This enables the attacker to potentially gain control over the device. **Recommendations** For dlink DIR 832x version 240802, as a temporary workaround, consider restricting access to the function `0x42232c` until a patch is available. Avoid using the `macaddr` key value in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dlink DIR 832 version 240802 **Description** The issue allows a remote attacker to execute arbitrary code via the function 0x41dda8. **Recommendations** For dlink DIR 832 version 240802, consider disabling the function 0x41dda8 as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** RE11S version 1.11 **Description** A stack overflow issue was discovered in the formiNICbasicREP function via the `rootAPmac` parameter. **Recommendations** For RE11S version 1.11, consider restricting access to the `formiNICbasicREP` function or avoiding the use of the `rootAPmac` parameter until a fix is available.

**Name of the Vulnerable Software and Affected Versions** Totolink N600R version 4.3.0cu.7647 B20210106 **Description** A stack overflow issue was discovered via the `macCloneMac` parameter in the `setWanConfig` function. **Recommendations** For Totolink N600R version 4.3.0cu.7647 B20210106, consider restricting access to the `setWanConfig` function until a patch is available. Avoid using the `macCloneMac` parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V4.0si V16.03.10.20 **Description** The issue concerns a Buffer Overflow in the AdvSetMacMtuWan function via the `mac2` variable. **Recommendations** For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider disabling the AdvSetMacMtuWan function until a patch is available. Restrict access to the `mac2` variable in the affected function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK N600R version 4.3.0cu.7647 B20210106 **Description** A stack overflow issue was discovered via the `pin` parameter in the `setWiFiWpsConfig()` function. **Recommendations** For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider disabling the `setWiFiWpsConfig()` function until a patch is available to prevent potential exploitation. Restrict access to the `pin` parameter in the affected function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Netgear R61 version 1.0.1.28 **Description** A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the `QUERY STRING` key value. **Recommendations** For version 1.0.1.28, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the `QUERY STRING` key value until a patch is available.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR 832x version 240802 **Description** The issue allows a remote attacker to execute arbitrary code. This is achieved via the `target addr` key value and the `0x41710c` function. **Recommendations** For D-Link DIR 832x version 240802, as a temporary workaround, consider restricting access to the vulnerable function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dlink DIR 832x version 240802 **Description** The issue allows a remote attacker to execute arbitrary code via the `target addr` key value and the function `0x41737c`. This enables the attacker to potentially gain control over the device. **Recommendations** For dlink DIR 832x version 240802, as a temporary workaround, consider restricting access to the function `0x41737c` until a patch is available. Avoid using the `target addr` key value in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V4.0si V16.03.10.20 **Description** The issue is related to a Buffer Overflow in AdvSetMacMtuWan via `cloneType2`. This can potentially be exploited. No information is provided about the estimated number of affected devices or real-world incidents. **Recommendations** For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider disabling the `AdvSetMacMtuWan` function via `cloneType2` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V4.0si V16.03.10.20 **Description** The issue is related to a Buffer Overflow in the AdvSetMacMtuWan function via the `serviceName2` variable. **Recommendations** For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider restricting access to the AdvSetMacMtuWan function until a patch is available. Avoid using the `serviceName2` variable in the affected function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda AC10 version V4.0si V16.03.10.20 **Description** The issue concerns a buffer overflow in the `AdvSetMacMtuWan` function through the `serverName2` variable. This can potentially allow for unauthorized access or control. **Recommendations** For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider restricting access to the `AdvSetMacMtuWan` function until a patch is available. Avoid using the `serverName2` variable in the affected function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** RE11S version 1.11 **Description** A stack overflow issue was discovered in the setWAN function via the `pptpUserName` parameter. This issue can be exploited, potentially leading to unintended consequences. No information is available about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For RE11S version 1.11, as a temporary workaround, consider restricting the use of the `setWAN` function or limiting input for the `pptpUserName` parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RE11S version 1.11 **Description** RE11S version 1.11 contains a command injection issue through the `command` parameter at the ''/goform/mp'' API endpoint. This allows for potential unauthorized command execution. **Recommendations** RE11S version 1.11: As a temporary workaround, consider restricting access to the ''/goform/mp'' API endpoint until a patch is available.