Vulnerabilities (CVE)

Filtered by CWE-121
Total 3797 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-33516 1 Arubanetworks 1 Arubaos 2026-06-17 N/A 5.3 MEDIUM
An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller.
CVE-2024-33515 1 Arubanetworks 1 Arubaos 2026-06-17 N/A 5.3 MEDIUM
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.
CVE-2024-33514 1 Arubanetworks 1 Arubaos 2026-06-17 N/A 5.3 MEDIUM
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.
CVE-2024-33513 1 Arubanetworks 1 Arubaos 2026-06-17 N/A 5.9 MEDIUM
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service.
CVE-2024-33512 2026-06-17 N/A 9.8 CRITICAL
There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2024-33511 2026-06-17 N/A 9.8 CRITICAL
There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2024-33217 1 Tenda 2 Fh1206, Fh1206 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.
CVE-2024-33215 1 Tenda 2 Fh1206, Fh1206 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat.
CVE-2024-33213 1 Tenda 2 Fh1206, Fh1206 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic.
CVE-2024-33212 1 Tenda 2 Fh1206, Fh1206 Firmware 2026-06-17 N/A 8.8 HIGH
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm.
CVE-2024-33211 1 Tenda 2 Fh1206, Fh1206 Firmware 2026-06-17 N/A 7.3 HIGH
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex.
CVE-2024-33182 1 Tendacn 2 Ac18, Ac18 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.
CVE-2024-33181 1 Tenda 2 Ac18, Ac18 Firmware 2026-06-17 N/A 8.8 HIGH
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.
CVE-2024-32320 1 Tenda 2 Ac500, Ac500 Firmware 2026-06-17 N/A 5.9 MEDIUM
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.
CVE-2024-32318 1 Tenda 2 Ac500, Ac500 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.
CVE-2024-32317 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
CVE-2024-32316 1 Tenda 2 Ac500, Ac500 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.
CVE-2024-32315 1 Tenda 2 Fh1202, Fh1202 Firmware 2026-06-17 N/A 4.7 MEDIUM
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
CVE-2024-32313 1 Tenda 2 Fh1205, Fh1205 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda FH1205 V2.0.0.7(775) firmware has a stack overflow vulnerability located via the adslPwd parameter of the formWanParameterSetting function.
CVE-2024-32312 1 Tenda 2 F1203, F1203 Firmware 2026-06-17 N/A 5.7 MEDIUM
Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function.