8 matches found
Tenda F456 安全漏洞
The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a security vulnerability. This vulnerability stems from an issue with the formWrlsafeset function in the goform/AdvSetWrlsafeset file, where there is a stack buffer overflow due t...
CVE-2026-3807: Stack-based Buffer Overflow
A security vulnerability has been detected in Tenda FH1202 1.2.0.14408. Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such manipulation of the argument mitssid/mitssidindex leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...
CVE-2026-3273
A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Such manipulation of the argument mitssidindex leads to buffer overflow. The attack can be executed remotely. The exploi...
PT-2026-22268
Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A remote buffer overflow exists in the httpd component of the Tenda F453 router firmware. The issue is located within the formWrlsafeset function of the /goform/AdvSetWrlsafeset endpoint. Manipulation of...
CVE-2026-3165
A vulnerability (CVE-2026-3165) affects Tenda F453 firmware 1.0.0.3. The flaw resides in the httpd component, specifically the fromSetWifiGusetBasic function in the /goform/AdvSetWrlsafeset file. By manipulating the mit_ssid argument, an attacker can trigger a buffer overflow. The issue can be ex...
Tenda FH1201 安全漏洞
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability, which originates from the parameter mitssid in the file /goform/AdvSetWrlsafeset that fails to correctly validate the length and size of the input data, which can be exploited by...
CVE-2025-2992: Improper Access Control
A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14408. Affected by this vulnerability is an unknown functionality of the file /goform/AdvSetWrlsafeset of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be launched...