CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

CVE-2023-37711

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function...

CVE-2023-37710

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapskcrypto parameter in the fromSetWirelessRepeat function...

CVE-2022-42080

Tenda AC1206 USAC1206V1.0RTLV15.03.06.23multiTD01 was discovered to contain a heap overflow via schedstarttime parameter...

CVE-2022-37813

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime...

CVE-2022-42078

Tenda AC1206 USAC1206V1.0RTLV15.03.06.23multiTD01 is vulnerable to Cross Site Request Forgery CSRF via function fromSysToolRestoreSet...

The vulnerability of the formSetCfm() function (/goform/setcfm) in the Tenda AC1206 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetCfm function /goform/setcfm in the Tenda AC1206 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2022-37800

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic...

CVE-2022-37812

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg...

CVE-2022-37807

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState...

CVE-2022-37803

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat...

CVE-2022-37804

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo...

CVE-2022-37798

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer...

CVE-2022-37816

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind...

CVE-2022-37808

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB...

CVE-2025-4298

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

CVE-2025-4299

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2025-09668)

The Tenda AC1206 is a wireless Gigabit router from Tenda China. The Tenda AC1206 suffers from a buffer overflow vulnerability that originates from the setSchedWifi function in the /goform/openSchedWifi file. An attacker can exploit this vulnerability to launch an attack and cause a buffer overflo...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2025-09667)

The Tenda AC1206 is a wireless Gigabit router from Tenda China. The Tenda AC1206 suffers from a buffer overflow vulnerability that affects the formSetCfm function in the /goform/setcfm file. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2025-4299

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public...