492 matches found
CVE-2022-37814
Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the deviceid parameters in the function addWifiMacFilter...
CVE-2022-37814
CVE-2022-37814 affects Tenda AC1206 (V15.03.06.23). The vulnerability consists of multiple stack overflows in the addWifiMacFilter function triggered by the deviceMac and device_id parameters. According to NVD, this yields a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user inte...
CVE-2022-37815
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...
CVE-2022-37815
The CVE-2022-37815 entry concerns Tenda AC1206 V15.03.06.23, where a stack overflow is caused by improper boundary checking of the formQuickIndex function, triggered via the PPPOEPassword parameter. Public sources in the connected documents describe the vulnerability as a buffer/stack overflow th...
CVE-2022-37813
CVE-2022-37813 affects Tenda AC1206 router (V15.03.06.23). A stack overflow is triggered by improper boundary checking in the fromSysTime/fromSetSysTime path, enabling potential arbitrary code execution on the device. Several sources (CNVD, CNNVD, Red Hat, NVD/NVD mirror) corroborate the vulnerab...
CVE-2022-37813
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime...
CVE-2022-37809
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speeddir parameter in the function formSetSpeedWan...
CVE-2022-37809
The CVE-2022-37809 entry affects Tenda AC1206, specifically version V15.03.06.23, where a stack overflow can be triggered in the formSetSpeedWan function via the speed_dir parameter. Several sources (CNVD/CNNVD, NVD, CVE records) describe this as a buffer overflow vulnerability that could allow a...
CVE-2022-37810
Summary: CVE-2022-37810 affects Tenda AC1206 devices (firmware v15.03.06.23). The issue is a command injection via the mac parameter in the function formWriteFacMac due to insufficient input sanitization, enabling remote command execution. Impact: As per the sources, this vulnerability can lead t...
CVE-2022-37810
Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...
EUVD-2022-40419
Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...
CVE-2022-37808
CVE-2022-37808 affects Tenda AC1206 (firmware V15.03.06.23). A stack overflow is triggered in the function formWifiWpsOOB via the index parameter due to improper boundary checks. Root cause: boundary checking issue in formWifiWpsOOB. Impact (as described in sources): potential arbitrary code exec...
CVE-2022-37808
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB...
CVE-2022-37807
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState...
CVE-2022-37807
CVE-2022-37807 affects Tenda AC1206 (V15.03.06.23). Multiple connected sources confirm a stack/buffer overflow arising from boundary checking in the function formSetClientState , enabling arbitrary code execution on the target. The CNVD/CNNVD summaries describe the vulnerability as a boundary/buf...
CVE-2022-37806
The CVE-2022-37806 entry concerns Tenda AC1206 firmware V15.03.06.23. A stack overflow is triggered via the page parameter in the fromDhcpListClient function, potentially enabling arbitrary code execution or crash conditions on affected devices. Public references from multiple sources confirm the...
CVE-2022-37806
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient...
CVE-2022-37805
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle...
CVE-2022-37805
CVE-2022-37805 affects Tenda AC1206 firmware v15.03.06.23. The issue is a stack/buffer overflow in the function fromWizardHandle, leading to a potentially critical impact (C/H/I/A all high per CVSS 3.1). Connected sources (NVD, CNVD, Red Hat, CNNVD) describe a buffer/stack overflow vulnerability;...