11 matches found
Tenda TX9 sub_425964 function buffer overflow vulnerability
Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the sub425964 function in the file/goform/SetOnlineDevName, which fails to properly validate the length of the input dat...
CVE-2024-51316
The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...
CVE-2024-51316: Uncontrolled Resource Consumption
The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...
CVE-2025-22946: Buffer Copy without Checking Size of Input
Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution...
CVE-2024-6403
A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched...
CVE-2024-2487: Stack-based Buffer Overflow
A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated...
CVE-2023-49431: Improper Neutralization of Special Elements used in a Command
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...
CVE-2022-45781
Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...
CVE-2022-45781: Out-of-bounds Write
Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...
