CVE-2025-9087

The CVE-2025-9087 vulnerability affects Tenda AC20 firmware 16.03.08.12, specifically the SetNetControlList component’s set_qosMib_list function in /goform/SetNetControlList. The issue arises from failure to validate the length of the input argument, causing a stack-based buffer overflow. This en...

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software allows a attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

PT-2025-12363

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.46 CN Description A stack overflow issue was discovered in Tenda AX12 via the sub 43fdcc function at the "/goform/SetNetControlList" API endpoint. Recommendations As a temporary workaround, consider disabling the su...

CVE-2025-1897: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11multi. This issue affects some unknown processing of the file /goform/SetNetControlList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has...

PT-2025-9581

Name of the Vulnerable Software and Affected Versions Tenda TX3 version 16.03.13.11 multi Description A critical issue has been found in the processing of the file /goform/SetNetControlList, where the manipulation of the list argument leads to a buffer overflow. This issue can be exploited...

The vulnerability of the formSetQosBand function (/goform/SetNetControlList) in the Tenda AC10U V1.0 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetQosBand function /goform/SetNetControlList in the Tenda AC10U V1.0 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-51812: Improper Neutralization of Special Elements used in a Command

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution RCE vulnerability via the list parameter at /goform/SetNetControlList...

CVE-2023-49434: Out-of-bounds Write

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-49436: Improper Neutralization of Special Elements used in a Command

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

PT-2023-31226

Name of the Vulnerable Software and Affected Versions Tenda AX12 version V22.03.01.46 Description A command injection issue has been discovered in the list parameter at the "/goform/SetNetControlList" API endpoint. This allows for potential command injection attacks. Recommendations For Tenda AX1...

Tenda AX9 Security Vulnerability

Tenda AX9 is a Wi-Fi 6 router from Tenda, China. A security vulnerability exists in Tenda AX9 version V22.03.01.46, which was discovered to contain a command injection vulnerability via the "list" parameter of /goform/SetNetControlList...

PT-2023-31223

Name of the Vulnerable Software and Affected Versions Tenda AX9 version V22.03.01.46 Description A stack overflow issue has been identified in the list parameter at the "/goform/SetNetControlList" API endpoint. This issue can be exploited, potentially leading to unintended consequences...

CVE-2023-49437: Improper Neutralization of Special Elements used in a Command

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-34569: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList...

PT-2022-25587

Name of the Vulnerable Software and Affected Versions Tenda AC18 router version V15.03.05.19 Description The issue concerns a stack overflow vulnerability in the formSetQosBand-FUN 0007db78 function. This vulnerability is triggered by the request "/goform/SetNetControlList/". Recommendations For...

CVE-2022-28082

Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList...

CVE-2022-28082

Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList...

CVE-2022-28082: Out-of-bounds Write

Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList...

PT-2022-18801

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 CN Description A stack overflow issue was discovered via the list parameter at the "/goform/SetNetControlList" API endpoint. Recommendations For Tenda AX12 version 22.03.01.21 CN, avoid using the list parameter i...