Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from Tenda. A stack overflow vulnerability exists in the Tenda AC15 SetOnlineDevName handling formSetDeviceName parameter, which can be exploited by a remote attacker to submit a special request that can crash the application or execute arbitrary code in the...

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from Tenda. The Tenda AC15 SetDlnaCfg handles a stack overflow vulnerability in the SetDlnaCfg parameter, which can be exploited by a remote attacker to submit a special request that can crash the application or execute arbitrary code in the application context...

CVE-2024-10280 Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer...

CVE-2024-10280: NULL Pointer Dereference

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer...

Tenda AC15 Command Execution Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC15 version V15.03.05.20, which stems from the goform/SetIPTVCfg interface failing to properly filter constructed command special characters, commands, etc. This vulnerability ca...

CVE-2023-36103

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...

CVE-2023-36103

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...

CVE-2023-36103

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC15 version V15.03.05.20, which stems from the goform/SetIPTVCfg interface failing to properly filter constructed command special characters, commands, etc. This vulnerability ca...

PT-2024-12547

Name of the Vulnerable Software and Affected Versions Tenda AC15 version V15.03.05.20 Description A Command Injection issue exists in the goform/SetIPTVCfg interface, allowing remote attackers to execute arbitrary commands via a crafted POST request. The "goform/SetIPTVCfg" interface is vulnerabl...

CVE-2023-36103: Improper Neutralization of Special Elements used in a Command

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...

CVE-2023-36103

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...

CVE-2023-36103

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...

CVE-2023-36103

The provided connected records confirm a concrete vulnerability: CVE-2023-36103 affects Tenda AC15 devices (V15.03.05.20) via the goform/SetIPTVCfg interface. A command injection flaw arises because inputs are not properly filtered, enabling remote attackers to craft a POST request that executes ...

PT-2024-7539 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 Description: A critical vulnerability has been found in the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to a stack-based buffer overflow. This issue can be...

CVE-2024-32303

Tenda AC15 v15.03.20multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function...

CVE-2024-32303

Tenda AC15 v15.03.20multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function...

PT-2024-24494 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions v15.03.05.18 through v15.03.20 multi Description: The issue is a stack overflow vulnerability. It is located via the PPW parameter in the fromWizardHandle function. Recommendations: For versions v15.03.05.18, v15.03.05.19,...

CVE-2024-32303: Stack-based Buffer Overflow

Tenda AC15 v15.03.20multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function...

CVE-2024-32303

Tenda AC15 v15.03.20multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function...