CVE-2023-51953

The Tenda AX1803 router (v1.0.0.1) has a stack overflow in the formSetIptv path exposed via the iptv.stb.mode parameter. A crafted HTTP request using this parameter can lead to arbitrary code execution on the device, as noted by CNVD-2024-02217 and related records. CVSS data in the CVE entry indi...

CVE-2023-51968

Affected product: Tenda AX1803 router (v1.0.0.1). Component/trigger: getIptvInfo() function vulnerable to a stack overflow via the adv.iptv.stballvlans parameter. Root cause: improper input length validation in getIptvInfo leading to stack overflow. Impact (as stated): potential remote code execu...

CVE-2023-51958

CVE-2023-51958 affects Tenda AX1803 v1.0.0.1, with a stack overflow discovered in the formGetIptv() function caused by handling of the iptv.stb.port parameter. Multiple sources describe potential outcomes as arbitrary code execution or a denial-of-service condition. The Red Hat, CNVD, CNNVD, and ...

CVE-2023-51967

CVE-2023-51967 affects Tenda AX1803 (v1.0.0.1); a stack overflow is triggered in getIptvInfo via the iptv.stb.port parameter. The issue has a CVSSv3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, LOW attack complexity, and no privileges required; impact to confidentiality, integrity, ...

CVE-2023-51969

CVE-2023-51969 affects Tenda AX1803 router (v1.0.0.1). The connected sources describe a stack overflow in the getIptvInfo function triggered via the iptv.city.vlan parameter. Root cause: a stack overflow vulnerability in the handling of that parameter. Impact stated across sources is high/confide...

CVE-2023-51959

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv...

Tenda AX1803 Security Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda, China. A security vulnerability exists in the Tenda AX1803 v1.0.0.1, which is caused by a buffer overflow vulnerability in the iptv.city.vlan parameter of the getIptvInfo method...

CVE-2023-51954

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv...

PT-2024-14351 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the adv.iptv.stballvlans parameter in the setIptvInfo function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider disabling the setIptvInfo...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stballvlans parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited b...

CVE-2023-51955

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv...

CVE-2023-51956

CVE-2023-51956 affects Tenda AX1803 with firmware v1.0.0.1. The root cause is a stack overflow in the formSetIptv() function via the iptv.city.vlan parameter due to improper input length validation. Impacts cited in multiple sources include potential arbitrary code execution or denial of service,...

CVE-2023-51962

The CVE-2023-51962 entry affects Tenda AX1803 v1.0.0.1 and describes a stack overflow in the setIptvInfo function triggered by the iptv.stb.mode parameter. Affected component: iptv control in AX1803; root cause: stack overflow vulnerability in setIptvInfo. Documented impact aligns with a high sev...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.stb.mode parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited by an...

PT-2024-14357 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A command injection issue was discovered via the fromAdvSetLanIp function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider disabling the fromAdvSetLanIp function until a patch is available...

CVE-2023-51960

CVE-2023-51960 affects Tenda AX1803 v1.0.0.1, with a stack overflow triggered by the iptv.city.vlan parameter in the formGetIptv function. Reported impact is code execution or crash (as described by multiple sources), with CVSSv3.1 metrics indicating a CRITICAL severity (AV:N/AC:L/PR:N/UI:N/S:U/C...

CVE-2023-51952

Affected product: Tenda AX1803 (v1.0.0.1). Root cause: stack overflow in the formSetIptv() function triggered by the adv.iptv.stbpvid parameter. Impact: according to sources, could allow arbitrary code execution or cause a denial of service. Exploitation status: not detailed in the provided docum...

CVE-2023-51961

The CVE-2023-51961 issue affects Tenda AX1803 v1.0.0.1, where a stack overflow is triggered in the formGetIptv() function via the adv.iptv.stballvlans parameter. Public sources describe potential remote exploitation leading to arbitrary code execution or denial of service, with multiple national ...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stbpvid parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited by an...

PT-2024-14337 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the adv.iptv.stbpvid parameter in the formSetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider restricting access t...