Tenda AC500 安全漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow issue in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file. No details of the...

PT-2024-5056 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A critical issue was found in the function formSetCfm of the file "/goform/setcfm". The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. It is possible to initiate the...

Tenda W20E 安全漏洞

The Tenda W20E is a wireless router developed by Tenda to provide wireless network connectivity and management capabilities. The Tenda W20E suffers from a stack buffer overflow vulnerability that originates from improper handling of the remoteIP parameter in the formSetRemoteWebManage function in...

PT-2024-3768 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the frmL7PlotForm function of the file /goform/frmL7ProtForm. This can be exploited by manipulating the page argument, allowing a remote...

PT-2024-4865 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: A critical vulnerability has been found in the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to a stack-based buffer overflow. It is possible t...

PT-2024-3758 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the fromRouteStatic function of the Tenda W30E router's software. This can be exploited by a remote attacker using a specially crafted POST...

Tenda W30E 操作系统命令注入漏洞

The Tenda W30E is a wireless router device that provides Internet access, wireless coverage and more. A command injection vulnerability exists in the formWriteFacMac function of the /goform/WriteFacMac file in version 1.0.1.25633 of the Tenda W30E, which can be exploited by an attacker to execute...

PT-2024-3133 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue affects the function R7WebsSecurityHandler of the file /goform/execCommand, leading to a stack-based buffer overflow when the password argument is manipulated. This can be exploited...

PT-2024-3134 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: The issue is related to a stack-based buffer overflow in the formSetRebootTimer function of the /goform/SetRebootTimer API endpoint. This can be exploited by manipulating the rebootTime argument,...

PT-2024-2877 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical issue affects the formQuickIndex function of the /goform/QuickIndex file, leading to a stack-based buffer overflow when the PPPOEPassword argument is manipulated. This can be exploited...

Tenda AC18 /goform/exeCommand Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability that stems from the failure to properly filter construct command special characters, commands...

PT-2024-2879 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical issue affects the R7WebsSecurityHandler function of the /goform/execCommand file, leading to a stack-based buffer overflow when the password argument is manipulated. This can be exploite...

PT-2024-2875 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical issue affects the formSetCfm function of the file /goform/setcfm, leading to a stack-based buffer overflow when the funcpara1 argument is manipulated. This can be exploited remotely,...

PT-2024-4866 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: A critical issue affects the fromNatlimit function of the file /goform/Natlimit. The manipulation of the page argument leads to a stack-based buffer overflow. This issue may be exploited remotely,...

CVE-2024-30891

A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution...

PT-2024-23662 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A command injection issue exists, allowing attackers to execute arbitrary commands by constructing cmdinput parameters in the "/goform/exeCommand" API endpoint. Recommendations: For Tenda AC18 versi...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability that stems from the failure to properly filter construct command special characters, commands...

The vulnerability of the fromAddressNat function (/goform/addressNat) in the Tenda F1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromAddressNat function /goform/addressNat in the Tenda FH1202 router microprogramming system involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the fromAddressNat function (/goform/addressNat) in the Tenda FH1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromAddressNat function /goform/addressNat in the Tenda FH1202 router microprogramming system involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

PT-2024-2462 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: The issue is related to a stack overflow vulnerability via the entrys parameter in the fromAddressNat function. This can be exploited by a remote attacker using a specially crafted POST request to...