Tenda AC15 操作系统命令注入漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a command injection vulnerabilit...

PT-2024-2344 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.48 Description: A critical issue has been found in the function formSetCfm of the file goform/setcfm, where the manipulation of the argument funcpara1 leads to a stack-based buffer overflow. This can be exploited...

PT-2024-2346 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.48 Description: A critical issue was found in the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument endIP leads to a stack-based buffer overflow. This can be initiat...

CVE-2024-2707

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

CVE-2024-2706

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formWifiWpsStart of the file /goform/WifiWpsStart. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

Tenda AC10 操作系统命令注入漏洞

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10U version 15.03.06.49 suffers from an operating system command injection vulnerability, which originates from the mac parameter of the formWriteFacMac function of the /goform/WriteFacMac file failing to correctly filter...

PT-2024-2348 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: The issue is related to a stack-based buffer overflow in the formSetFirewallCfg function, accessible through the "/goform/SetFirewallCfg" endpoint. The manipulation of the firewallEn argument can...

The vulnerability of the fromSysToolRestoreSet() function (/goform/SysToolRestoreSet) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolRestoreSet function /goform/SysToolRestoreSet in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF atta...

The vulnerability of the fromSysToolReboot() function (/goform/SysToolReboot) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF attack...

PT-2024-2351

Name of the Vulnerable Software and Affected Versions Tenda AC10U version 15.03.06.49 Description The issue is related to a stack-based buffer overflow in the fromSetRouteStatic function of the /goform/SetStaticRouteCfg file. This can be exploited remotely, potentially affecting the...

PT-2024-2352 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: The issue is related to a stack-based buffer overflow in the formexeCommand function of the /goform/execCommand file. This can be exploited by manipulating the cmdinput argument, potentially allowi...

PT-2024-2474 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue affects the formSetSpeedWan function of the file /goform/SetSpeedWan. The manipulation of the speed dir argument leads to a stack-based buffer overflow. This issue can be exploite...

Tenda AC18 Cross-Site Request Forgery Vulnerability

Tenda AC18 is a router from Tenda, China. A cross-site request forgery vulnerability exists in Tenda AC18 version V15.03.05.05, which stems from a cross-site request forgery in the fromSysToolRestoreSet function of the /goform/SysToolRestoreSet file...

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which is caused by a stack-based buffer overflow in the cmdinput parameter of the formexeCommand function of the /goform/execCommand file...

Tenda AC18 Cross-Site Request Forgery Vulnerability

Tenda AC18 is a router from Tenda, China. A cross-site request forgery vulnerability exists in Tenda AC18 version V15.03.05.05, which stems from a cross-site request forgery in the SysToolReboot function of the /goform/SysToolReboot file...

PT-2024-2393

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.20 multi Description A critical issue affects the saveParentControlInfo function of the file "/goform/saveParentControlInfo". The manipulation of the urls argument leads to a stack-based buffer overflow. This can be...

PT-2024-2391

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description The issue is related to the function formSetSambaConf in the /goform/setsambacfg endpoint, where the usbName parameter is not properly sanitized, leading to OS command injection. This allows a remote...

CVE-2024-2486

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. Th...

CVE-2024-2485

A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack-based buffer overflow in the PPPOEPassword parameter of the formQuickIndex function of the /goform/QuickIndex file...