503 matches found
CVE-2023-47455
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size...
CVE-2023-47456
Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub455D4, called by function fromSetWirelessRepeat...
CVE-2023-47456
CVE-2023-47456 affects Tenda AX1806 firmware v1.0.0.1. A stack overflow vulnerability in sub_455D4, triggered during processing of the wpapsk crypto parameter and invoked by fromSetWirelessRepeat, can lead to denial of service. Root cause: insufficient length validation in sub_455D4 (stack buffer...
CVE-2023-47456
Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub455D4, called by function fromSetWirelessRepeat...
CVE-2023-47455
CVE-2023-47455 — Tenda AX1806 (V1.0.0.1) has a heap overflow in the setSchedWifi function caused by reading http request parameters schedStartTime and schedEndTime into src and v12 without size checks. Reported effects include the potential to remotely cause arbitrary behavior or denial of servic...
PT-2023-9692 · Tenda · Tenda Ax1806
Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a heap overflow in the setSchedWifi function. This occurs because the src and v12 variables are directly obtained from HTTP request parameters schedStartTime and schedEndTime...
PT-2023-9691 · Tenda · Tenda Ax1806
Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a stack overflow vulnerability in the sub 455D4 function of the Tenda AX1806 router's firmware, which occurs when processing the wpapsk crypto parameter. This vulnerability can...
Tenda AX1806 WanParameterSetting function command injection vulnerability
Tenda AX1806 is a WiFi6 wireless router from Tenda, China.A command injection vulnerability exists in Tenda AX1806 v1.0.0.1, which stems from the failure of the WanParameterSetting function to properly filter the construct command special characters, commands, etc. The vulnerability can be...
CVE-2022-34597
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...
CVE-2022-34597
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...
CVE-2022-34597
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...
Command injection
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...
CVE-2022-34597
CVE-2022-34597 affects Tenda AX1806 v1.0.0.1. The WanParameterSetting function is susceptible to command injection, enabling arbitrary command execution with network access and no authentication required (per CVSS 3.1: CRITICAL, 9.8). Concrete details: vulnerable component is WanParameterSetting;...
CVE-2022-34597
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting...
Tenda AX1806 操作系统命令注入漏洞
Tenda AX1806 is a WiFi6 wireless router from Tenda, China.A command injection vulnerability exists in Tenda AX1806 v1.0.0.1, which stems from the failure of the WanParameterSetting function to properly filter the construct command special characters, commands, etc. The vulnerability can be...
Tenda AX1806 fromSetRouteStatic function stack overflow vulnerability
Tenda AX1806 is a WiFi6 wireless router from Tenda, China. version V1.0.0.1 of Tenda AX1806 is vulnerable to a stack overflow vulnerability, which stems from the list parameter of the fromSetRouteStatic function not checking its length for input data. An attacker could exploit this vulnerability ...
Tenda AX1806 formSetQosBand function stack overflow vulnerability
Tenda AX1806 is a WiFi6 wireless router from Tenda, China. Tenda AX1806 V1.0.0.1 is vulnerable to a stack overflow vulnerability that stems from the list parameter in the formSetQosBand function not checking its length for input data. An attacker could exploit this vulnerability to cause a denial...
Tenda AX1806 formSetVirtualSer function stack overflow vulnerability
Tenda AX1806 is a WiFi6 wireless router from Tenda China.A stack overflow vulnerability exists in Tenda AX1806 V1.0.0.1, which stems from the formSetVirtualSer function not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service attack...
Tenda AX1806 formAddMacfilterRule function stack overflow vulnerability
A stack overflow vulnerability exists in the Tenda AX1806 formAddMacfilterRule function, which stems from the fact that the deviceList parameter of the formAddMacfilterRule function does not check the input data for length. No details of the vulnerability are available at this time...