14 matches found
CVE-2026-0640: Buffer Copy without Checking Size of Input
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...
CVE-2025-15356: Buffer Copy without Checking Size of Input
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit...
The vulnerability of the sub_42C014() function (/goform/PowerSaveSet) in the Tenda TX9 Pro router’s microprogramming system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sub42C014 function /goform/PowerSaveSet of the Tenda TX9 Pro router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability can allow an attacker to compromise the...
PT-2024-12027
Name of the Vulnerable Software and Affected Versions Tenda AC6 version US AC6V5.0re V03.03.02.01 cn TDC01 Description A stack overflow issue allows attackers to run arbitrary commands via a crafted POST request to "/goform/PowerSaveSet". This can be exploited by sending a specifically designed...
CVE-2023-24332: Stack-based Buffer Overflow
A stack overflow vulnerability in Tenda AC6 with firmware version USAC6V5.0reV03.03.02.01cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet...
CVE-2023-41562
CVE-2023-41562 affects Tenda routers: AC7 v1.0 (V15.03.06.44), AC9 v3.0 (V15.03.06.42_multi), and AC5 (US_AC5V1.0RTL_V15.03.06.28). The vulnerability is a stack overflow triggered by the time parameter in the /goform/PowerSaveSet API. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL)...
CVE-2023-40893
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
CVE-2023-40893
CVE-2023-40893 affects Tenda AC8 (v4 US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow triggered by the time parameter to /goform/PowerSaveSet. Public documents describe potential for crashing the application and, in some sources, arbitrary code execution in the application con...
CVE-2023-40893: Out-of-bounds Write
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
CVE-2023-34568
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
CVE-2023-34568: Out-of-bounds Write
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
PT-2022-25589
Name of the Vulnerable Software and Affected Versions Tenda AC15 and AC18 routers version V15.03.05.19 Description The issue concerns a stack overflow vulnerability in the setSmartPowerManagement function, which is triggered by the request "/goform/PowerSaveSet". Recommendations For Tenda AC15 an...