Tenda Buffer Overflow (CVE-2020-13389; CVE-2020-13390; CVE-2020-13391; CVE-2020-13392; CVE-2020-13393)

A buffer overflow vulnerability exists in Tenda. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2020-13390

creationtimestamp| type| source ---|---|--- 2020-05-27 07:55:33+00:00| seen| https://t.me/cibsecurity/12301 2024-10-14 22:35:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/540...

CVE-2020-13390

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

CVE-2020-13390

The CVE-2020-13390 entry concerns a buffer overflow in the Tenda router httpd when handling the POST /goform/addressNat entrys and mitInterface parameters. The attacker-supplied value is directly used in a sprintf into a stack-allocated local variable, overwriting a function return address and en...