CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

Design/Logic Flaw

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

Tenda AC1206 Buffer Error Vulnerability

Tenda AC1206 is a wireless through-the-wall king gigabit router from Tenda, China. A security vulnerability exists in the Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13, and AC9 V3.0 V15.03.06.42multi versions, which stems from the following...

CVE-2023-38936

CVE-2023-38936 concerns multiple Tenda devices (AC10, AC1206, AC6, AC7, AC5, FH1203, AC9, FH1205) where a stack overflow occurs in the function to set WAN speed (formSetSpeedWan) via the speed_dir parameter. Affected firmware versions include V15.03.06.xx ranges listed in the sources. The core is...

CVE-2023-38931

CVE-2023-38931 is a stack overflow in Tenda devices’ setaccount function when handling the list parameter, affecting multiple models (AC10, AC1206, AC8, AC6, AC7, F1203, AC5, FH1203, etc.). The root cause is improper handling/validation of the list parameter, enabling potential remote code execut...

The vulnerability of the fromSetWirelessRepeat function in the microprogramming software for Tenda AC1206 and Tenda AC10 allows a hacker to execute arbitrary code.

The vulnerability of the fromSetWirelessRepeat function in the microprogramming software for Tenda AC1206 and Tenda AC10 lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `saveParentControlInfo` function in the microprogramming software for Tenda AC1206 and Tenda AC10 allows a hacker to execute arbitrary code.

The vulnerability of the saveParentControlInfo function in Tenda AC1206 and Tenda AC10 router microprogramming systems lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-37717

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...

CVE-2023-37717

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...

CVE-2023-37716

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting...

CVE-2023-37717

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...

CVE-2023-37711

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function...

CVE-2023-37712

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

CVE-2023-37711

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function...

CVE-2023-37710

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapskcrypto parameter in the fromSetWirelessRepeat function...

CVE-2023-37712

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

CVE-2023-37711

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function...

CVE-2023-37710

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapskcrypto parameter in the fromSetWirelessRepeat function...

CVE-2023-37712

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...