CVE-2025-29387

In Tenda AC9 v1.0 V15.03.05.14multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-29387

CVE-2025-29387 affects Tenda AC9 router (v1.0, V15.03.05.14_multi). The vulnerability is a stack overflow in the wanSpeed parameter of /goform/AdvSetMacMtuWan, enabling remote arbitrary code execution. The incident is documented across multiple sources (NVD/Red Hat/CNVD/CNNVD, etc.). The provided...

CVE-2025-29384

The CVE-2025-29384 vulnerability affects Tenda AC9 (firmware V15.03.05.14_multi) in the /goform/AdvSetMacMtuWan endpoint, where the wanMTU parameter can overflow a stack-allocated buffer due to improper bounds checking. This stack overflow enables remote attackers to crash the web server and, per...

CVE-2025-29385

CVE-2025-29385 affects Tenda AC9 v1.0 with V15.03.05.14_multi. The cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability that can lead to remote arbitrary code execution. Reported impact is CRITICAL with network attack vector and no user interaction or privileges requi...

CVE-2025-29386

CVE-2025-29386 affects Tenda AC9 v1.0 with firmware V15.03.05.14_multi. A vulnerability exists in the mac parameter of /goform/AdvSetMacMtuWan where input length/size is not properly validated, causing a stack overflow and enabling remote arbitrary code execution per the linked sources. Documente...

PT-2025-17636

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 1.0 with firmware V15.03.05.14 multi Description The security parameter of the "/goform/WifiBasicSet" API endpoint has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Recommendations For Ten...

CVE-2019-5071

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...

CVE-2019-5072

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...

Tenda AC9 Stack Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a stack overflow vulnerability that originates from a stack overflow issue found in /goform/SetOnlineDevName. An attacker can exploit this vulnerability to remotely execute arbitrary code...

Tenda AC9 Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability, which originated when /goform/SetSambaCfg was found to contain a command injection vulnerability. An attacker can exploit this vulnerability to remotely execute arbitrary co...

CVE-2025-22949

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution...

CVE-2025-22949

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution...

CVE-2025-22946

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution...

CVE-2025-22946

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution...

CVE-2025-22949

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution...

CVE-2025-22949

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution...

PT-2025-4749 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda ac9 version v15.03.05.19 Description: The issue is related to command injection in the /goform/SetSambaCfg API endpoint, which may lead to remote arbitrary code execution. Recommendations: For Tenda ac9 version v15.03.05.19, as a...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability, which originated when /goform/SetSambaCfg was found to contain a command injection vulnerability. An attacker can exploit this vulnerability to remotely execute arbitrary co...

CVE-2025-22946

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution...

PT-2025-4748 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda ac9 version 1.0 v15.03.05.19 Description: The issue concerns a stack overflow vulnerability in the /goform/SetOnlineDevName API endpoint, which may lead to remote arbitrary code execution. Recommendations: For Tenda ac9 version 1.0...