CVE-2023-30373

CVE-2023-30373 affects Tenda AC15 router (v15.03.05.19). The vulnerability is a stack-based buffer overflow in the xian_pppoe_user function, with CVSS v3.1 base score 9.8 (CRITICAL): network attack vector, no user interaction, no privileges required, and impacts on confidentiality, integrity, and...

PT-2023-22662

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the xian pppoe user function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the xian pppoe user function...

Tenda AC15 缓冲区错误漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC15 version V15.03.05.19, which originates from a stack-based buffer overflow vulnerability in the function getIfIp...

CVE-2023-30375

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability...

CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30376

In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-30371

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-30371

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-30370

CVE-2023-30370 affects the Tenda AC15 router specifically version V15.03.05.19. The vulnerability is a stack-based overflow in the GetValue function, which can lead to complete compromise of affected devices. The CVE’s published metrics indicate a 9.8/10 CRITICAL base score with network access re...

CVE-2022-46109

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

CVE-2022-46109

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

Buffer overflow

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

PT-2022-27740 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.06.23 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetClientState function. Recommendations: For Tenda AC15 version 15.03.06.23, as a temporary workaround, consider disablin...

Tenda AC15 缓冲区错误漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC15 version V15.03.06.23, which originates from a buffer overflow via the formSetClientState function...

CVE-2022-46109

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

CVE-2022-46109

CVE-2022-46109 affects Tenda AC15 V15.03.06.23, with a buffer overflow vulnerability in the formSetClientState function. Public records cite a CVSS v3.1 base score of 7.5 (HIGH, NETWORK attack vector, no authentication required, user interaction not needed, availability impact). Affected product/...

CVE-2022-46109: Out-of-bounds Write

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

Tenda AC15 Command Injection (CVE-2022-28557)

A command injection vulnerability exists in Tenda AC15. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tenda AC15 formSetIpMacBind Function Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 firmware version V15.03.05.19, which is caused by the formSetIpMacBind function not checking the length of the input data, and can be exploited by an attacker to launch a...

Tenda AC15 fromSetRouteStatic function buffer overflow vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 version V15.03.05.18, which can be exploited to launch a denial-of-service attack because the fromSetRouteStatic function does not perform a length check on the input data...