PT-2024-2600 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: The issue is caused by a stack-based buffer overflow in the formSetDeviceName function of the /goform/SetOnlineDevName file. This can be exploited remotely by manipulating the devName argument,...

Tenda AC15 Cross-Site Request Forgery Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a cross-site request forgery...

PT-2024-2597

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A critical issue affects the formWifiWpsOOB function of the /goform/WifiWpsOOB file, caused by a stack-based buffer overflow. The manipulation of the index argument leads to this overflow. The attack c...

Tenda AC15 formSetSpeedWan Method Stack Buffer Overflow Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

The vulnerability of the formSetQosBand function (/goform/SetNetControlList) in the Tenda AC10U V1.0 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetQosBand function /goform/SetNetControlList in the Tenda AC10U V1.0 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Tenda AC15 formSetSambaConf Method Command Injection Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a command injection...

Tenda AC15 fromSysToolRestoreSet Method Cross-Site Request Forgery Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a cross-site request forgery...

CVE-2024-2851

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been classified as critical. This affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to initiate the attack remotely...

Tenda AC15 安全漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC15 version 15.03.20multi, which is caused by a stack-based buffer overflow in the urls parameter of the saveParentControlInfo method on the /goform/saveParentControlInfo page...

Tenda AC18 操作系统命令注入漏洞

Tenda AC18 is a router from Tenda, China. An OS command injection vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from an OS command injection in the usbName parameter of the formSetSambaConf method on the /goform/setsambacfg page...

Tenda AC15 操作系统命令注入漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a command injection...

PT-2024-2420

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 Description A critical issue affects the saveParentControlInfo function of the file /goform/saveParentControlInfo, leading to a stack-based buffer overflow when the urls argument is manipulated. This can be...

CVE-2024-2816

A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected by this vulnerability is the function fromSysToolReboot of the file /goform/SysToolReboot. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been...

CVE-2024-2815

A vulnerability classified as critical has been found in Tenda AC15 15.03.20multi. Affected is the function R7WebsSecurityHandler of the file /goform/execCommand of the component Cookie Handler. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to laun...

Tenda AC15 安全漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC15 version 15.03.05.18, which is caused by a stack-based buffer overflow in the firewallEn parameter of the formSetFirewallCfg method on the /goform/SetFirewallCfg page...

Tenda AC15 跨站请求伪造漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a cross-site request forgery...

Tenda AC15 跨站请求伪造漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a cross-site request forgery...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

Tenda AC10 OS Command Injection Vulnerability (CNVD-2024-15743)

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10U version 15.03.06.49 suffers from an operating system command injection vulnerability, which originates from the mac parameter of the formWriteFacMac function of the /goform/WriteFacMac file failing to correctly filter...

The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...