VYPR

O1 Firmware

by Tenda

CVEs (2)

  • CVE-2024-8227HigAug 28, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to…

  • CVE-2024-8226HigAug 28, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability has been found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched…