CVE-2022-25437

CVE-2022-25437 affects Tenda AC9, specifically version 15.03.2.21. The vulnerability is a stack overflow in the SetVirtualServerCfg function triggered by the list parameter. Public sources describe potential arbitrary code execution as a consequence of the overflow. Documented remediation status ...

CVE-2022-25437

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...

CVE-2022-25435

CVE-2022-25435 affects Tenda AC9, specifically v15.03.2.21. The vulnerability is a stack overflow in the SetStaticRoutecfg function exposed via the list parameter, which can lead to arbitrary command execution as described across multiple feeds. The connected documents consistently identify the a...

CVE-2022-25435

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function...

CVE-2022-25434

The CVE-2022-25434 entry concerns Tenda AC9 v15.03.2.21, where a stack overflow is triggered by the firewallen parameter in SetFirewallCfg. Multiple connected sources confirm the vulnerable component and input (firewallen in SetFirewallCfg) and indicate potential arbitrary command execution as th...

CVE-2022-25434

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function...

CVE-2022-25433

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function...

CVE-2022-25433

CVE-2022-25433 affects Tenda AC9, firmware version 15.03.2.21, with a stack overflow in the saveparentcontrolinfo function triggered via the urls parameter. This could enable arbitrary command execution on vulnerable devices. Public documents cite potential impact (CNVD) and related CVE reference...

CVE-2022-25428

CVE-2022-25428 affects Tenda AC9, version 15.03.2.21, with a stack overflow in the saveparentcontrolinfo function triggered by the deviceId parameter. Multiple sources describe it as allowing arbitrary command execution via this flaw. The NVD data indicates a high/critical impact with network acc...

CVE-2022-25428

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function...

CVE-2022-25431

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function...

CVE-2022-25431

Summary: CVE-2022-25431 affects Tenda AC9 firmware, specifically version 15.03.2.21, due to multiple stack overflows in the Formsetqosband function triggered via NPTR, V12, V10, and V11 parameters. This vulnerability is described as potentially allowing arbitrary command execution and is rated CR...

CVE-2022-25429

CVE-2022-25429 affects Tenda AC9 router (v15.03.2.21). A buffer overflow exists in the saveparentcontrolinfo function triggered by the time parameter, enabling arbitrary code execution as indicated by the reports. Public details identify the vulnerable component and version; explicit exploitation...

CVE-2022-25429

Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function...

CVE-2022-25427

CVE-2022-25427 affects Tenda AC9, specifically v15.03.2.21. The openSchedWifi function contains a stack overflow via the schedendtime parameter, which CNVD/CNNVD reports as enabling arbitrary command execution. The NVD/CVE records classify impact as high/critical (network attack, no user interact...

CVE-2022-25427

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function...

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the vlanid parameter in the SetIPTVCfg function to properly filter the special elements of the construction snippet, which can be exploited to...

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the dosystemcmd parameter in the suba3550 function to properly filter the special elements of the construction snippet, which can be exploited...

PT-2022-17295 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A stack overflow issue was discovered via the ntpserver parameter in the SetSysTimeCfg function. Recommendations: For Tenda AC9 version 15.03.2.21, consider restricting access to the SetSysTimeCfg...

Tenda AC9 缓冲区错误漏洞

The Tenda AC9 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...