865 matches found
The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...
The vulnerability of the formSetSpeedWan() function (/goform/SetSpeedWan) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetSpeedWan function /goform/SetSpeedWan of the Tenda AC18 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the speeddir parameter. Exploiting this vulnerability can allow an attacker to compromise th...
The vulnerability of the setSchedWifi()/goform.openSchedWifi function in the Tenda AC18 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the setSchedWifi/goform.openSchedWifi function in the Tenda AC18 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the schedEndTime parameter. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the formSetQosBand() function (/goform/SetNetControlList) in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetQosBand function /goform/SetNetControlList of the Tenda AC18 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the fromSysToolRestoreSet() function (/goform/SysToolRestoreSet) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.
The vulnerability of the fromSysToolRestoreSet function /goform/SysToolRestoreSet in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF atta...
The vulnerability of the fromSysToolReboot() function (/goform/SysToolReboot) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.
The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF attack...
Tenda AC18 fromSetWirelessRepeat function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the wpapskcrypto5g parameter of the fromSetWirelessRepeat function failing to correctly validate the length of the input data, which can be exploited by a...
Tenda AC18 formexeCommand function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...
Tenda AC18 R7WebsSecurityHandler function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from the password parameter of the R7WebsSecurityHandler function that fails to correctly validate the length of the input data, and can be...
Tenda AC18 setSchedWifi function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from the parameter schedStartTime/schedEndTime in the setSchedWifi function of file /goform/openSchedWifi, which fails to correctly validate the...
CVE-2024-28547
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...
CVE-2024-28547
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...
CVE-2024-28537
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...
CVE-2024-28537
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...
CVE-2024-28550
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...
CVE-2024-28550
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...
CVE-2024-28550
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...
CVE-2024-28550
The CVE-2024-28550 entry concerns Tenda AC18 router firmware V15.03.05.05, reporting a stack overflow in the filePath parameter of the formExpandDlnaFile function. Public references confirm the affected device and parameter, with a CVSSv3.1 base score of 4.3 (Network, Low privileges, no user inte...
Tenda AC18 Security Vulnerability
Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack overflow vulnerability in the page parameter of the fromNatStaticSetting function...