Lucene search
+L

754 matches found

Cvelist
Cvelist
added 2022/08/16 12:43 p.m.29 views

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

10AI score0.02408EPSS
Exploits1References1
EUVD
EUVD
added 2022/08/16 12:43 p.m.6 views

EUVD-2022-38990

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

9.8CVSS9.8AI score0.02408EPSS
Exploits1References1
CVE
CVE
added 2022/08/16 12:43 p.m.94 views

CVE-2022-36273

The CVE-2022-36273 entry affects Tenda AC9, specifically version 15.03.2.21_cn. The vulnerability is a command injection via the API endpoint goform/SetSysTimeCfg, enabling an attacker to execute arbitrary commands on the device. Reported impacts are high (confidentiality, integrity, and availabi...

9.8CVSS9.7AI score0.02408EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/16 12:0 a.m.5 views

PT-2022-23288 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 cn Description: The issue is related to command injection via the "goform/SetSysTimeCfg" API endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated...

9.8CVSS9.7AI score0.02408EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.10 views

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

9.8CVSS7.9AI score0.02408EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/06/29 12:0 a.m.7 views

PT-2022-6755 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

9.8CVSS9.7AI score0.00928EPSS
Exploits1References7
OSV
OSV
added 2022/05/24 12:15 p.m.4 views

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

6.5CVSS6.2AI score
Exploits0References2
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.5 views

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 V1.0 V15.03.02.196318 and AC9 V3.0 V15.03.06.42multi versions, which originates from a buffer overflow issue in the web server httpd. When setting up a virtual service, the httpd program will crash and...

6.5CVSS6.9AI score0.00806EPSS
Exploits1References3
CNVD
CNVD
added 2022/05/08 12:0 a.m.18 views

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38540)

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 is vulnerable to a stack overflow vulnerability, which originates from the goform/fastsettingwifiset function in the httpd service that does not properly validate data boundaries when performing operations on memory, and can ...

10CVSS4.2AI score0.01665EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/03 4:15 p.m.3 views

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

10CVSS7.3AI score0.01665EPSS
Exploits1References2
NVD
NVD
added 2022/05/03 4:15 p.m.14 views

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

10CVSS0.01665EPSS
Exploits1References1
OSV
OSV
added 2022/05/03 4:15 p.m.5 views

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

9.8CVSS7.4AI score0.01665EPSS
Exploits1References1
Prion
Prion
added 2022/05/03 4:15 p.m.19 views

Stack overflow

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

10CVSS9.5AI score0.01665EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/03 3:20 p.m.22 views

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

9.8AI score0.01665EPSS
Exploits1References1
CVE
CVE
added 2022/05/03 3:20 p.m.86 views

CVE-2022-28560

The CVE-2022-28560 entry concerns Tenda AC9 (firmware 15.03.2.21_cn) with a stack overflow in the httpd service’s goform/fast_setting_wifi_set function. This vulnerability allows an attacker to trigger a stable shell via a carefully crafted payload. CVSSv3.1 vector: Network, Privileges NONE, User...

10CVSS9.5AI score0.01665EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/05/03 12:0 a.m.6 views

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 is vulnerable to a stack overflow vulnerability, which originates from the goform/fastsettingwifiset function in the httpd service that does not properly validate data boundaries when performing operations on memory, and can ...

10CVSS8.4AI score0.01665EPSS
Exploits1References2
CNVD
CNVD
added 2022/04/08 12:0 a.m.39 views

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38543)

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...

10CVSS1.8AI score0.01665EPSS
Exploits1References1
CNVD
CNVD
added 2022/04/08 12:0 a.m.30 views

Tenda AC9 Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a buffer overflow vulnerability, which can be exploited to execute arbitrary code via the url parameter...

8.8CVSS4.7AI score0.01098EPSS
Exploits1References1
OSV
OSV
added 2022/04/07 4:15 p.m.3 views

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/04/07 4:15 p.m.26 views

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

10CVSS0.01665EPSS
Exploits1References1
Rows per page
Query Builder