CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30376

In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2022-43259

Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function...

CVE-2022-28556

Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow...

CVE-2022-46109

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

CVE-2022-44167

Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer...

CVE-2022-44156

Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind...

CVE-2022-44168

Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic...

CVE-2022-40853

Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fastsettingwifiset...

CVE-2022-40862

Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting...

CVE-2022-40851

Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat...

CVE-2022-28557

There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution...

CVE-2022-44169

Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer...

CVE-2020-10989

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter...

Tenda AC15 Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 15.03.05.19 and earlier versions suffer from a buffer overflow vulnerability, which originates from the mac parameter of the function fromSetWirelessRepeat in the file /goform/WifiExtraSet failing to correctly validate...

CVE-2025-3786

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

The vulnerability of Tenda AC15 router’s microprogramming software, related to reading data outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Tenda AC15 router’s microprogramming software is related to reading data outside the buffer in memory when processing the wepkey1 parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Tenda AC15 router’s microprogramming software, related to reading data outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Tenda AC15 router’s microprogramming software lies in the reading of data outside the buffer in memory when processing the SYSPS parameter. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted request...

CVE-2025-3786

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2025-3786

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been...