1033 matches found
Command injection
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...
CVE-2022-35201
The CVE-2022-35201 entry concerns the Tenda-AC18 router with firmware version v15.03.05.05, described as having a remote command execution (RCE) vulnerability. The connected records consistently identify this vulnerability as affecting Tenda-AC18 V15.03.05.05 and classify the impact as remote cod...
CVE-2022-35201
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...
Tenda AC18 security vulnerabilities
Tenda AC18 is a router from Tenda China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a vulnerability that allows an attacker to achieve remote command execution...
PT-2022-22629 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda-AC18 version 15.03.05.05 Description: A remote command execution issue was discovered, allowing for potential unauthorized access and control. Recommendations: For Tenda-AC18 version 15.03.05.05, update to a newer version that contains ...
CVE-2022-35201: Undefined Security Weakness
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...
Tenda AC18 Router DoS
The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to the issue of writing operations outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability could allow a malicious actor to cause service...
Tenda AC18 Router DoS
The vulnerability of the httpd microprogramming system in the Tenda AC18 router is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by making a request to the /goform/WifiExtraSet endpoint...
Tenda AC18 Router httpd Module Data Compromise
The vulnerability of the httpd microprogramming system for the Tenda AC18 router is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by using...
Tenda AC18 Remote Code Execution Vulnerability (CNVD-2023-15693)
A remote code execution vulnerability exists in Tenda AC18 V15.03.05.19 and V15.03.05.05, which stems from the failure of the Mac parameter of ip/goform/WriteFacMac to properly filter the special elements of the constructed code segment. An attacker could exploit the vulnerability to cause...
CVE-2022-31446
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...
CVE-2022-31446
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...
CVE-2022-31446
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...
Remote code execution
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...
CVE-2022-31446
CVE-2022-31446 affects Tenda AC18 router versions V15.03.05.05–V15.03.05.19. It is a remote code execution vulnerability exploitable via the Mac parameter at the endpoint ip/goform/WriteFacMac, caused by failure to properly filter special elements in the constructed code segment. Potential impact...
CVE-2022-31446
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...
Tenda AC18: Operating System Command Injection Vulnerability
A remote code execution vulnerability exists in Tenda AC18 V15.03.05.19 and V15.03.05.05, which stems from the failure of the Mac parameter of ip/goform/WriteFacMac to properly filter the special elements of the constructed code segment. An attacker could exploit the vulnerability to cause...
CVE-2022-31446: Improper Neutralization of Special Elements used in an OS Command
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...
PT-2022-20739 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 router versions V15.03.05.05 through V15.03.05.19 Description: A remote code execution RCE issue was discovered via the Mac parameter at the "ip/goform/WriteFacMac" endpoint. This allows for potential exploitation. Recommendations:...