VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,626)

page 21 of 182
  • CVE-2023-46552CriOct 25, 2023
    Totolink
    X2000r Firmware
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.

  • CVE-2023-43492CriOct 19, 2023
    Weintek
    cMT3000
    risk 0.64cvss 9.8epss 0.01

    In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.

  • CVE-2023-38584CriOct 19, 2023
    Weintek
    cMT3000
    risk 0.64cvss 9.8epss 0.01

    In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.

  • CVE-2023-45984CriOct 16, 2023
    Totolink
    X5000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

  • CVE-2023-36950CriOct 16, 2023
    Totolink
    X5000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

  • CVE-2023-36947CriOct 16, 2023
    Totolink
    X5000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.

  • CVE-2023-34426CriOct 11, 2023
    Yifan
    Yf325
    risk 0.64cvss 9.8epss 0.01

    A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.

  • CVE-2023-34365CriOct 11, 2023
    Yifan
    Yf325
    risk 0.64cvss 9.8epss 0.01

    A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a buffer overflow. An attacker can send a network request to trigger this vulnerability.

  • CVE-2023-33028CriOct 3, 2023
    Qualcomm
    WLAN Firmware
    risk 0.64cvss 9.8epss 0.01

    Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

  • CVE-2023-44019CriSep 27, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.

  • CVE-2023-44017CriSep 27, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.

  • CVE-2023-44016CriSep 27, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.

  • CVE-2023-44015CriSep 27, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.

  • CVE-2023-44014CriSep 27, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters.

  • CVE-2023-44013CriSep 27, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function.

  • CVE-2023-43242CriSep 21, 2023
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel.

  • CVE-2023-43238CriSep 21, 2023
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi.

  • CVE-2023-43236CriSep 21, 2023
    Dlink
    DIR-816
    risk 0.64cvss 9.8epss 0.01

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi.

  • CVE-2023-2262CriSep 20, 2023
    Rockwellautomation
    1756-EN*
    risk 0.64cvss 9.8epss 0.01

    A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to…

  • CVE-2023-43203CriSep 20, 2023
    Dlink
    DWL-6610
    risk 0.64cvss 9.8epss 0.01

    D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users.