Command injection

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

CVE-2018-16334

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

Stack overflow

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

CVE-2018-14492

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

CVE-2018-14492

The CVE-2018-14492 entry affects Tenda router models AC7 (firmware up to 15.03.06.44_CN), AC9 (up to 15.03.05.19(6318)_CN), and AC10 (up to 15.03.06.23_CN). A stack-based buffer overflow is triggered by a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI. No explicit patch/v...

ac9.i2i.jp Open Redirect vulnerability

Open Bug Bounty ID: OBB-612523 Description| Value ---|--- Affected Website:| ac9.i2i.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Tenda AC9 Buffer Overflow Vulnerability

Tenda AC9 is a wireless router product from Tenda, a Chinese company. A stack buffer overflow vulnerability exists in httpd in Tenda AC9. A remote attacker can exploit this vulnerability to cause a denial of service...

CVE-2018-7561

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14EN allows remote attackers to cause a denial of service or possibly have unspecified other impact...

Stack overflow

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14EN allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2018-7561

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14EN allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2018-7561

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14EN allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2018-7561

CVE-2018-7561 is a stack-based buffer overflow in the httpd component of Tenda AC9 devices running version V15.03.05.14_EN. Public documents from CNVD/NVD describe a remote-exploitable flaw that allows a remote attacker to cause a denial of service and potentially other impact. The vulnerability ...

Directory traversal

Directory Traversal vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.196318cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.196318cn devices...

CVE-2017-16923

The CVE-2017-16923 entry describes a Command Injection vulnerability in the app_data_center component of several Shenzhen Tenda router models (e.g., Ac9, Ac15, Ac18 variants). The underlying issue is that the function sub_A6E8 usbeject_process_entry executes a system function using untrusted inpu...