CVE-2022-42167: Out-of-bounds Write

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg...

CVE-2022-42169: Out-of-bounds Write

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter...

CVE-2022-42167

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg...

CVE-2022-42171: Out-of-bounds Write

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo...

CVE-2022-42169

CVE-2022-42169 affects Tenda AC10 with V15.03.06.23 and describes a stack-based overflow in the addWifiMacFilter function. The root cause is a bounds-check failure in addWifiMacFilter, enabling a remote attacker to trigger a stack overflow that can lead to arbitrary code execution or denial of se...

CVE-2022-42165

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName...

CVE-2022-42171

CVE-2022-42171 affects Tenda AC10 firmware version V15.03.06.23, with a stack overflow in the /goform/saveParentControlInfo endpoint. The vulnerability is described as a stack overflow in this component, with CVSS v3.1 base score 9.8 (CRITICAL) and impact to confidentiality, integrity, and availa...

Tenda AC10 缓冲区错误漏洞

The Tenda AC10 is a wireless router from China-based Tenda. A security vulnerability exists in Tenda AC10 firmware version V15.03.06.23, which originates from a stack buffer overflow in its /goform/fromSetIpMacBind component...

CVE-2022-42166

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan...

CVE-2022-42166

CVE-2022-42166 affects Tenda AC10 firmware v15.03.06.23 with a reported stack overflow in the endpoint /goform/formSetSpeedWan . CVSS v3.1 base score 9.8 (CRITICAL); attacker requires network access, with no authentication or user interaction, and impact to confidentiality, integrity, and availab...

CVE-2022-42165

CVE-2022-42165 affects Tenda AC10 router software (v15.03.06.23). The vulnerability is a stack overflow in the formSetDeviceName endpoint (/goform/formSetDeviceName), enabling potential arbitrary code execution or denial of service. CVSS v3.1 base score 9.8 (Network, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I...

CVE-2022-42164

CVE-2022-42164 affects Tenda AC10, specifically version 15.03.06.23. The vulnerability is a stack overflow in the formSetClientState API (/goform/formSetClientState) caused by incorrect boundary checking. Impact is described consistently as potential arbitrary code execution or denial of service,...

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

Remote code execution

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

CVE-2022-32054

Summary of CVE-2022-32054 (Tenda AC10): Affects the Tenda AC10 router (US_AC10V1.0RTL_V15.03.06.26_multi_TD01). The issue is a remote code execution (RCE) vulnerability exploitable via the lanIp parameter. Several connected advisories specify this as a command injection flaw allowing an attacker ...

PT-2022-21079 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version US AC10V1.0RTL V15.03.06.26 multi TD01 Description: A remote code execution issue was discovered, allowing exploitation via the lanIp parameter. Recommendations: For Tenda AC10 version US AC10V1.0RTL V15.03.06.26 multi TD01...

CVE-2022-32054: Improper Neutralization of Special Elements used in an OS Command

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...