859 matches found
CVE-2024-57577
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speeddir parameter in the formSetSpeedWan function...
CVE-2024-57578
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...
CVE-2024-57579
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function...
CVE-2024-57581
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function...
CVE-2024-57583
Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function...
Tenda AC18 安全漏洞
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the limitSpeedUp parameter of the formSetClientState function failing to properly validate the length of the input data, which can be exploited by an attacke...
CVE-2024-57581
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function...
CVE-2024-57582
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function...
CVE-2024-57580
CVE-2024-57580 concerns the Tenda AC18 router. Multiple connected sources confirm a stack overflow in the formSetDeviceName function triggered via the devName parameter, with the vulnerability existing in firmware version V15.03.05.19. The exploit path involves sending a crafted request (e.g., PO...
Tenda AC18 安全漏洞
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the speeddir parameter of the formSetSpeedWan function failing to properly validate the length and size of the input data, which can be exploited by an...
Tenda AC18 安全漏洞
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the startIP parameter of the formSetPPTPServer function failing to properly validate the length of the input data, which can be exploited by an attacker to...
PT-2024-10240 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a stack overflow in the formSetCfm function due to the funcpara1 parameter. This can potentially allow a remote attacker to execute arbitrary code or cause a denial of servic...
PT-2025-3477 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: A command injection issue exists due to the lack of neutralization of special elements when processing the usbName parameter in the formSetSambaConf function. This allows a remote attacker to execu...
PT-2025-3472 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the form fast setting wifi set function when processing the ssid parameter. This can allow a remote attacker to cause a denial of service or execute...
PT-2025-3473 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the formSetSpeedWan function when handling the speed dir parameter. This can be exploited by a remote attacker to cause a denial of service...
PT-2025-3476 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the formSetPPTPServer function when handling the startIP parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...
CVE-2024-10280 Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer...
VulnCheck KEV: CVE-2024-30891
A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution...
Tenda AC18 Buffer Overflow Vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the ssid parameter at ip/goform/fastsettingwifite. No detailed vulnerability details are available at this time...
