Tenda AC15 Router DoS

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC15 router’s microprogramming software is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a remote attacker to cause service...

Tenda AC18 Router CSRF

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF attack...

PT-2024-2217

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description The issue is related to insufficient authentication of requests executed by the fromSysToolReboot function, which can be exploited to launch a cross-site request forgery CSRF attack. This can be done...

PT-2022-18402

Name of the Vulnerable Software and Affected Versions Tenda AX12 version V22.03.01.21 CN Description The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the function sub 42E328 at the "/goform/SysToolReboot" API endpoint. This allows for unauthorized actions to be...

PT-2020-12471

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description A CSRF issue allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page, specifically targeting the "goform/SysToolReboot"...

PT-2014-7879

Name of the Vulnerable Software and Affected Versions Tenda A32 Router version 5.07.53 CN Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that reboot the device via a request to "goform/SysToolReboot"...

CVE-2014-7281: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53CN allows remote attackers to hijack the authentication of administrators for requests that reboot the device via a request to goform/SysToolReboot...