PT-2025-36541

Name of the Vulnerable Software and Affected Versions: Tenda AC20 versions up to 16.03.08.12 Description: A buffer overflow exists in the web UI of Tenda AC20. The issue is located in the strcpy function within the /goform/GetParentControlInfo file. Manipulation of the mac argument can trigger th...

The vulnerability of the GetParentControlInfo function in the /goform/GetParentControlInfo file of the Tenda AC1206 router’s microprogramming software allows a attacker to trigger a service failure.

The vulnerability of the GetParentControlInfo function in the /goform/GetParentControlInfo file of the Tenda AC1206 microprogramming device for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the GetParentControlInfo() function in Tenda AC21 and AC23 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the GetParentControlInfo function in Tenda AC21 and AC23 router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a specially crafte...

CVE-2025-9605

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...

CVE-2025-9605 Tenda AC21/AC23 GetParentControlInfo stack-based overflow

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...

CVE-2025-9605 Tenda AC21/AC23 GetParentControlInfo stack-based overflow

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...

CVE-2025-9605

CVE-2025-9605 affects Tenda AC21/AC23 routers (version 16.03.08.16). The GetParentControlInfo function in /goform/GetParentControlInfo is vulnerable to a stack-based buffer overflow caused by manipulation of the mac argument. This enables remote exploitation (attack vector: NETWORK) and has publi...

CVE-2025-9605: Stack-based Buffer Overflow

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...

Tenda AC23和Tenda AC21 安全漏洞

Tenda AC23 and Tenda AC21 are both products of Tenda, a Chinese company.Tenda AC23 is a dual-band gigabit wireless router.Tenda AC21 is a wireless router. A security vulnerability exists in Tenda AC23 and Tenda AC21 version 16.03.08.16, which originates from a stack buffer overflow due to incorre...

CVE-2025-9523

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-9523

The CVE-2025-9523 issue affects Tenda AC1206 firmware 15.03.06.23. A stack-based buffer overflow is triggered in GetParentControlInfo (file /goform/GetParentControlInfo) when the mac argument is manipulated, enabling remote execution. Exploitation is public and can be used remotely; CVSS metrics ...

CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

Tenda AC1206 安全漏洞

The Tenda AC1206 is a wireless gigabit router from Tenda China. A security vulnerability exists in the Tenda AC1206 version 15.03.06.23, which originates from a stack buffer overflow due to incorrect manipulation of the mac parameter in the file /goform/GetParentControlInfo...

CVE-2025-9523: Stack-based Buffer Overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

The vulnerability of the /goform/GetParentControlInfo component in the Tenda AC8V4 router software allows a attacker to execute arbitrary code.

The vulnerability of the /goform/GetParentControlInfo component in the Tenda AC8V4 router microprogramming system is related to the operation of writing data outside of the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2025-51089

Tenda AC8V4 V16.03.34.06 was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument mac leads to heap-based buffer overflow...

CVE-2025-51089: Heap-based Buffer Overflow

Tenda AC8V4 V16.03.34.06 was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument mac leads to heap-based buffer overflow...

Tenda AC8V4 安全漏洞

The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a heap buffer overflow in the mac parameter in /goform/GetParentControlInfo, which can be exploited by an attacker to crash the system by corrupting the memory...

CVE-2025-51089

Tenda AC8V4 V16.03.34.06 was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument mac leads to heap-based buffer overflow...

The vulnerability of the GetParentControlInfo() function in Tenda AC10 router software allows a hacker to execute arbitrary code.

The vulnerability of the GetParentControlInfo function in Tenda AC10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...