A15 Security Vulnerabilities

CVE-2024-0533

A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument devName leads to stack-based buffer overflow. The...

CVE-2024-0534

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch.....

CVE-2024-0531

A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the component Web-based Management Interface. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to....

CVE-2024-0532

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects unknown code of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapsk_crypto2_4g leads to stack-based buffer overflow....

CVE-2023-46518

Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component...

CVE-2022-47116

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at...

CVE-2022-47115

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at...

CVE-2022-47117

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at...

CVE-2022-47118

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at...

CVE-2022-47119

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at...

CVE-2022-47123

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at...

CVE-2022-47125

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at...

CVE-2022-47126

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at...

CVE-2022-47127

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at...

CVE-2022-47128

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at...

CVE-2022-47121

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at...

CVE-2022-47122

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at...

CVE-2022-47124

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at...

CVE-2022-47120

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at...

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of...

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which....

CVE-2021-23243

In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be...

CVE-2020-11836

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return...

CVE-2017-5753

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel...