Lucene search
+L

563 matches found

CVE
CVE
•added 2025/04/07 9:31 a.m.•104 views

CVE-2025-3346

CVE-2025-3346 affects Tenda AC7 (v15.03.06.44) due to a buffer overflow in the function formSetPPTPServer within /goform/SetPptpServerCfg. Manipulating pptp_server_start_ip/pptp_server_end_ip can overflow a buffer, potentially allowing remote code execution. Multiple connected sources confirm the...

9CVSS7.1AI score0.07731EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/04/07 9:31 a.m.•28 views

CVE-2025-3346 Tenda AC7 SetPptpServerCfg formSetPPTPServer buffer overflow

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

9CVSS0.07731EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•5 views

CVE-2025-3346: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

9CVSS8.2AI score0.07731EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•26 views

Tenda AC7 安全漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44, which is caused by improper handling of the pptpserverstartip/pptpserverendip parameters in the formSetPPTPServer function in the /goform/SetPptpServerCfg file...

9CVSS8.2AI score0.07731EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/05 12:00 a.m.•20 views

PT-2025-15116 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptp server start ip/pptp server end ip leads to buffer overflow. The...

9CVSS8.7AI score0.07731EPSS
SaveExploits0References16
CNVD
CNVD
•added 2025/03/28 12:00 a.m.•44 views

Tenda AC7 Buffer Overflow Vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from the formWifiBasicSet function failing to correctly validate the length and size of the input data, which can be exploited by an attacker to execute arbitra...

9.8CVSS8.1AI score0.01096EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/03/27 12:00 a.m.•16 views

The vulnerability of the Telnet protocol implementation in the microprogramming-based router software Tenda AC7 allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet protocol implementation in the Tenda AC7 microprogramming router software lies in the lack of measures taken to clean data at the management level when processing the lanip parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

6.5CVSS7AI score0.01787EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•41 views

Tenda AC7 Buffer Overflow Vulnerability (CNVD-2025-07593)

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function failing to properly validate the length of the input data, which can be exploited by an...

9.8CVSS8.1AI score0.00541EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/26 12:22 a.m.•25 views

CVE-2025-29135

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

9.8CVSS8.9AI score0.01096EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/24 9:15 p.m.•13 views

CVE-2025-29135

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

9.8CVSS6.6AI score0.01096EPSS
SaveExploits1References2
NVD
NVD
•added 2025/03/24 9:15 p.m.•39 views

CVE-2025-29135

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

9.8CVSS0.01096EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•13 views

Tenda AC7 安全漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from the formWifiBasicSet function failing to correctly validate the length and size of the input data, which can be exploited by an attacker to execute arbitra...

9.8CVSS8.3AI score0.01096EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•4 views

CVE-2025-29135: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

9.8CVSS7AI score0.01096EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/24 12:00 a.m.•41 views

CVE-2025-29135

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

0.01096EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/24 12:00 a.m.•89 views

CVE-2025-29135

The Tenda AC7 wireless router (version 15.03.06.44 ) is vulnerable to a stack-based buffer overflow . This flaw occurs because the formWifiBasicSet function fails to correctly validate the length and size of input data provided via the security parameter. A remote attacker can exploit this to exe...

9.8CVSS8.8AI score0.01096EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/24 12:00 a.m.•11 views

CVE-2025-29135

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

8.8AI score0.01096EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•13 views

PT-2025-12706 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A stack-based buffer overflow vulnerability allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function...

9.8CVSS9.9AI score0.01096EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/03/21 12:22 a.m.•32 views

CVE-2025-29137

Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...

9.8CVSS7.5AI score0.00541EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/19 4:15 p.m.•18 views

CVE-2025-29137

Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...

9.8CVSS6.1AI score0.00541EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/19 4:15 p.m.•21 views

CVE-2025-29137

Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...

9.8CVSS0.00541EPSS
SaveExploits1References1
Rows per page
Query Builder