CVE-2022-37813

CVE-2022-37813 affects Tenda AC1206 router (V15.03.06.23). A stack overflow is triggered by improper boundary checking in the fromSysTime/fromSetSysTime path, enabling potential arbitrary code execution on the device. Several sources (CNVD, CNNVD, Red Hat, NVD/NVD mirror) corroborate the vulnerab...

CVE-2022-37809

The CVE-2022-37809 entry affects Tenda AC1206, specifically version V15.03.06.23, where a stack overflow can be triggered in the formSetSpeedWan function via the speed_dir parameter. Several sources (CNVD/CNNVD, NVD, CVE records) describe this as a buffer overflow vulnerability that could allow a...

CVE-2022-37809

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speeddir parameter in the function formSetSpeedWan...

CVE-2022-37810

Summary: CVE-2022-37810 affects Tenda AC1206 devices (firmware v15.03.06.23). The issue is a command injection via the mac parameter in the function formWriteFacMac due to insufficient input sanitization, enabling remote command execution. Impact: As per the sources, this vulnerability can lead t...

EUVD-2022-40419

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

CVE-2022-37810

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

CVE-2022-37808

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB...

CVE-2022-37808

CVE-2022-37808 affects Tenda AC1206 (firmware V15.03.06.23). A stack overflow is triggered in the function formWifiWpsOOB via the index parameter due to improper boundary checks. Root cause: boundary checking issue in formWifiWpsOOB. Impact (as described in sources): potential arbitrary code exec...

CVE-2022-37807

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState...

CVE-2022-37807

CVE-2022-37807 affects Tenda AC1206 (V15.03.06.23). Multiple connected sources confirm a stack/buffer overflow arising from boundary checking in the function formSetClientState , enabling arbitrary code execution on the target. The CNVD/CNNVD summaries describe the vulnerability as a boundary/buf...

CVE-2022-37806

The CVE-2022-37806 entry concerns Tenda AC1206 firmware V15.03.06.23. A stack overflow is triggered via the page parameter in the fromDhcpListClient function, potentially enabling arbitrary code execution or crash conditions on affected devices. Public references from multiple sources confirm the...

CVE-2022-37806

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient...

CVE-2022-37805

CVE-2022-37805 affects Tenda AC1206 firmware v15.03.06.23. The issue is a stack/buffer overflow in the function fromWizardHandle, leading to a potentially critical impact (C/H/I/A all high per CVSS 3.1). Connected sources (NVD, CNVD, Red Hat, CNNVD) describe a buffer/stack overflow vulnerability;...

CVE-2022-37805

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle...

CVE-2022-37811

CVE-2022-37811 affects Tenda AC1206 V15.03.06.23. Several connected sources describe a stack overflow exploited via the startIp parameter in the formSetPPTPServer function, caused by improper boundary checking. Public documents mention potential arbitrary code execution (per CNVD/CNNVD) and a hig...

CVE-2022-37811

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer...

CVE-2022-37812

CVE-2022-37812 affects Tenda AC1206 (V15.03.06.23). A stack/buffer overflow exists in the firewallEn parameter within the function formSetFirewallCfg caused by improper boundary checking. This vulnerability could allow an attacker to overflow memory and execute arbitrary code on the device. The C...

CVE-2022-37812

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg...

CVE-2022-37803

Tenda AC1206 V15.03.06.23 is affected by a buffer/stack overflow in the fromAddressNat function triggered via the page parameter. The issue is described across multiple sources (e.g., CNVD, NVD, Red Hat, CVE records) as an improper boundary check in fromAddressNat, allowing potential arbitrary co...

CVE-2022-37803

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat...