CVE-2022-25414

Tenda AC9 V15.03.2.21cn was discovered to contain a stack overflow via the parameter NPTR...

CVE-2022-25414

The CVE-2022-25414 entry concerns Tenda AC9 (V15.03.2.21_cn). The vulnerability is a stack overflow caused by improper handling of the NPTR parameter, as described in multiple sources (CNVD, CNNVD, Red Hat, NVD). Affected product is a wireless router; the root cause is a memory bounds handling is...

Tenda AC9 has an unspecified vulnerability

Tenda AC9, a wireless router from Tenda China, is vulnerable to a security flaw in Tenda AC9 v3.0 that allows remote execution of code via shell metacharacters in the guestuser field to a fastcall function request with POST. No details of the vulnerability are currently available...

CVE-2020-26728

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42multi and Tenda AC9 V1.0 V15.03.05.196318CN which allows for remote code execution via shell metacharacters in the guestuser field to the fastcall function with a POST request...

CVE-2020-26728

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42multi and Tenda AC9 V1.0 V15.03.05.196318CN which allows for remote code execution via shell metacharacters in the guestuser field to the fastcall function with a POST request...

Remote code execution

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42multi and Tenda AC9 V1.0 V15.03.05.196318CN which allows for remote code execution via shell metacharacters in the guestuser field to the fastcall function with a POST request...

CVE-2020-26728

The CVE-2020-26728 entry corresponds to a remote code execution in Tenda AC9 devices (v3.0 V15.03.06.42_multi and v1.0 V15.03.05.19(6318)_CN). The underlying issue is shell metacharacters in the guestuser field used by the __fastcall function via a POST request, enabling an attacker to execute ar...

CVE-2020-26728

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42multi and Tenda AC9 V1.0 V15.03.05.196318CN which allows for remote code execution via shell metacharacters in the guestuser field to the fastcall function with a POST request...

Tenda AC9 安全漏洞

Tenda AC9, a wireless router from Tenda China, is vulnerable to a security flaw in Tenda AC9 v3.0 that allows remote execution of code via shell metacharacters in the guestuser field to a fastcall function request with POST. No details of the vulnerability are currently available...

The vulnerability of the formsetUsbUnload function in the microprogramming software for Tenda AC7, Tenda AC9, and Tenda AC10 allows a hacker to execute arbitrary operating system commands.

The vulnerability of the formsetUsbUnload function in the microprogramming software for Tenda AC7, Tenda AC9, and Tenda AC10 exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2021-84225)

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 V1.0 through V15.03.05.196318 and AC9 V3.0 V15.03.06.42multi, which is due to a boundary error when handling untrusted input. An attacker could execute arbitrary code via an index...

Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request...

CVE-2021-31627

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the index parameter...

CVE-2021-31624

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the urls parameter...

CVE-2021-31624

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the urls parameter...

CVE-2021-31627

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the index parameter...

Buffer overflow

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the index parameter...

Buffer overflow

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the urls parameter...

CVE-2021-31627

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the index parameter...

CVE-2021-31627

CVE-2021-31627 affects Tenda AC9 routers. The vulnerability is a buffer overflow caused by a boundary error when handling untrusted input, exploitable via the index parameter. Affected products/versions: Tenda AC9 V1.0–V15.03.05.19(6318) and AC9 V3.0 V15.03.06.42_multi. Impact per sources: attack...