563 matches found
CVE-2024-48825: Improper Neutralization of Special Elements used in an OS Command
Tenda AC7 v.15.03.06.44 ateifconfigset has pre-authentication command injection allowing remote attackers to execute arbitrary code...
PT-2024-33244 · Tenda · Tenda Ac7
Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: The issue allows remote attackers to execute arbitrary code due to a pre-authentication command injection in the ate iwpriv set function. Recommendations: For version 15.03.06.44, consider disabling...
CVE-2024-48826: Improper Neutralization of Special Elements used in an OS Command
Tenda AC7 v.15.03.06.44 ateiwprivset has pre-authentication command injection allowing remote attackers to execute arbitrary code...
CVE-2024-10280 Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer...
CVE-2024-10280: NULL Pointer Dereference
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer...
The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...
Tenda AC7 Command Injection Vulnerability
Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts the 802.11ac standard and supports dual-band concurrent transmission with a wireless rate of up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from the...
Tenda AC7 Buffer Overflow Vulnerability
Tenda AC7 is a dual-band router from Tenda Technology, focusing on signal coverage and high-speed transmission for large households. Tenda AC7 suffers from a buffer overflow vulnerability, which stems from the PPW parameter of the fromWizardHandle method failing to properly validate the length an...
CVE-2024-32301
Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function...
CVE-2024-32281
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
Tenda AC7 安全漏洞
Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts the 802.11ac standard and supports dual-band concurrent transmission with a wireless rate of up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from the...
Tenda AC7 安全漏洞
Tenda AC7 is a dual-band router from Tenda Technology, focusing on signal coverage and high-speed transmission for large households. Tenda AC7 suffers from a buffer overflow vulnerability, which stems from the PPW parameter of the fromWizardHandle method failing to properly validate the length an...
The vulnerability of the formQuickIndex function (/goform/QuickIndex) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formQuickIndex function /goform/QuickIndex in the Tenda AC7 router software arises due to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the GetParentControlInfo function (/goform/GetParentControlInfo) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of GetParentControlInfo /goform/GetParentControlInfo in the Tenda AC7 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through ...
The vulnerability of the fromSetWifiGuestSetBasic function (/goform/WifiGuestSet) in the Tenda AC7 router software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromSetWifiGuestSetBasic function /goform/WifiGuestSet in the Tenda AC7 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the setSchedWifi function (/goform/openSchedWifi) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the setSchedWifi function /goform/openSchedWifi in the Tenda AC7 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the formWifiWpsStart function (/goform/WifiWpsStart) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formWifiWpsStart function /goform/WifiWpsStart in the Tenda AC7 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through...
The vulnerability of the `saveParentControlInfo` function (/goform/saveParentControlInfo) in the Tenda AC7 router software allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the saveParentControlInfo function /goform/saveParentControlInfo in the Tenda AC7 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the fromSetWirelessRepeat function (/goform/WifiExtraSet) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromSetWirelessRepeat function /goform/WifiExtraSet in the Tenda AC7 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the formWriteFacMac function (/goform/WriteFacMac) in the Tenda AC7 router software allows a attacker to execute arbitrary commands.
The vulnerability of the fromSetRouteStatic /goform/SetStaticRouteCfg function in the Tenda AC7 router software relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...