CVE-2018-16333: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is...

Stack overflow

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

CVE-2018-14492

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

CVE-2018-14492

The CVE-2018-14492 entry affects Tenda router models AC7 (firmware up to 15.03.06.44_CN), AC9 (up to 15.03.05.19(6318)_CN), and AC10 (up to 15.03.06.23_CN). A stack-based buffer overflow is triggered by a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI. No explicit patch/v...

CVE-2018-14492: Out-of-bounds Write

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...