Lucene search
+L

865 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.10 views

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC18 router’s software lies in the fact that the operation may escape out of the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise th...

9CVSS7.9AI score0.01648EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.9 views

The vulnerability of the setSchedWifi()/goform.openSchedWifi function in the Tenda AC18 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setSchedWifi/goform.openSchedWifi function in the Tenda AC18 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the schedEndTime parameter. Exploiting this vulnerability can allow an attacker to...

9CVSS7.9AI score0.01648EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.11 views

The vulnerability of the formSetSpeedWan() function (/goform/SetSpeedWan) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetSpeedWan function /goform/SetSpeedWan of the Tenda AC18 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the speeddir parameter. Exploiting this vulnerability can allow an attacker to compromise th...

9CVSS7.9AI score0.01684EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.13 views

The vulnerability of the formSetQosBand() function (/goform/SetNetControlList) in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetQosBand function /goform/SetNetControlList of the Tenda AC18 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability could allow an attacker to compromise the...

9CVSS7.9AI score0.01648EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.21 views

The vulnerability of the fromSysToolRestoreSet() function (/goform/SysToolRestoreSet) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolRestoreSet function /goform/SysToolRestoreSet in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF atta...

5CVSS5.6AI score0.00414EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.10 views

The vulnerability of the fromSysToolReboot() function (/goform/SysToolReboot) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF attack...

5CVSS5.5AI score0.00307EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2024/03/19 12:00 a.m.43 views

Tenda AC18 fromSetWirelessRepeat function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the wpapskcrypto5g parameter of the fromSetWirelessRepeat function failing to correctly validate the length of the input data, which can be exploited by a...

9CVSS8.5AI score0.0099EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/19 12:00 a.m.64 views

Tenda AC18 formexeCommand function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...

9CVSS8.3AI score0.01278EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/19 12:00 a.m.58 views

Tenda AC18 setSchedWifi function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from the parameter schedStartTime/schedEndTime in the setSchedWifi function of file /goform/openSchedWifi, which fails to correctly validate the...

9CVSS8.4AI score0.01648EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/03/19 12:00 a.m.66 views

Tenda AC18 R7WebsSecurityHandler function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from the password parameter of the R7WebsSecurityHandler function that fails to correctly validate the length of the input data, and can be...

9CVSS8.6AI score0.01186EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/18 2:15 p.m.11 views

CVE-2024-28547

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...

6.5CVSS5.8AI score0.00496EPSS
SaveExploits1References1
NVD
NVD
added 2024/03/18 2:15 p.m.31 views

CVE-2024-28547

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...

6.5CVSS7AI score0.00496EPSS
SaveExploits1References1
NVD
NVD
added 2024/03/18 2:15 p.m.18 views

CVE-2024-28537

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...

9.8CVSS7AI score0.00776EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/18 2:15 p.m.9 views

CVE-2024-28537

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...

9.8CVSS5.8AI score0.00776EPSS
SaveExploits1References1
NVD
NVD
added 2024/03/18 1:15 p.m.18 views

CVE-2024-28550

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...

4.3CVSS7AI score0.00392EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/18 1:15 p.m.8 views

CVE-2024-28550

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...

4.3CVSS5.8AI score0.00392EPSS
SaveExploits1References1
CVE
CVE
added 2024/03/18 12:00 a.m.69 views

CVE-2024-28550

The CVE-2024-28550 entry concerns Tenda AC18 router firmware V15.03.05.05, reporting a stack overflow in the filePath parameter of the formExpandDlnaFile function. Public references confirm the affected device and parameter, with a CVSSv3.1 base score of 4.3 (Network, Low privileges, no user inte...

4.3CVSS7.3AI score0.00392EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/03/18 12:00 a.m.27 views

CVE-2024-28550

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...

7.2AI score0.00392EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.13 views

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack overflow vulnerability in the page parameter of the fromNatStaticSetting function...

9.8CVSS7.3AI score0.00776EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/18 12:00 a.m.35 views

CVE-2024-28537

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...

7.2AI score0.00776EPSS
SaveExploits1References1
Rows per page
Query Builder