12 matches found
CVE-2026-0640: Buffer Copy without Checking Size of Input
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...
CVE-2025-15356: Buffer Copy without Checking Size of Input
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit...
The vulnerability of the sub_42C014() function (/goform/PowerSaveSet) in the Tenda TX9 Pro router’s microprogramming system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sub42C014 function /goform/PowerSaveSet of the Tenda TX9 Pro router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability can allow an attacker to compromise the...
CVE-2023-24332: Stack-based Buffer Overflow
A stack overflow vulnerability in Tenda AC6 with firmware version USAC6V5.0reV03.03.02.01cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet...
CVE-2023-41562
CVE-2023-41562 affects Tenda routers: AC7 v1.0 (V15.03.06.44), AC9 v3.0 (V15.03.06.42_multi), and AC5 (US_AC5V1.0RTL_V15.03.06.28). The vulnerability is a stack overflow triggered by the time parameter in the /goform/PowerSaveSet API. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL)...
CVE-2023-40893
CVE-2023-40893 affects Tenda AC8 (v4 US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow triggered by the time parameter to /goform/PowerSaveSet. Public documents describe potential for crashing the application and, in some sources, arbitrary code execution in the application con...
CVE-2023-40893
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
CVE-2023-40893: Out-of-bounds Write
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
CVE-2023-34568
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...