PT-2024-2176 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formQuickIndex function of the /goform/QuickIndex file, allowing for a stack-based buffer overflow through the manipulation of the PPPOEPassword argument. This can be...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users, supporting 2.4GHz and 5GHz dual-band, with a maximum transmission rate of 1900Mbps. Tenda AC18 suffers from a stack buffer overflow vulnerability that...

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which is caused by a stack-based buffer overflow in the devName/mac parameter of the formSetDeviceName function of the /goform/SetOnlineDevName file...

CVE-2024-2487: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated...

Tenda AC18 Stack Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users, supporting 2.4GHz and 5GHz dual-band, with a maximum transmission rate of 1900Mbps. Tenda AC18 suffers from a stack buffer overflow vulnerability that...

PT-2024-2407 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical issue affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection, allowing remote...

PT-2024-2401 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical issue has been found in the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to a stack-based buffer overflow...

PT-2024-2405 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical vulnerability affects the formExpandDlnaFile function of the /goform/expandDlnaFile file, leading to a stack-based buffer overflow when the filePath argument is...

PT-2024-2318 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formexeCommand function of the file /goform/execCommand. The manipulation of the cmdinput argument leads to a stack-based buffer overflow. This issue can be exploited...

PT-2024-2216 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A vulnerability was found in the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. This issue is related to insufficient authentication of executed requests, which can lead to...

PT-2024-2217

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description The issue is related to insufficient authentication of requests executed by the fromSysToolReboot function, which can be exploited to launch a cross-site request forgery CSRF attack. This can be done...

PT-2024-2267 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue is related to a stack overflow vulnerability in the page parameter of the fromNatStaticSetting function, which can be exploited by a remote attacker to impact the confidentiality, integrit...

CVE-2024-22543

An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...

Linksys E1700 Security Breach

Linksys E1700 is a wireless router from Linksys USA. A security vulnerability exists in Linksys E1700 version 1.0.04. An attacker can exploit the vulnerability to escalate privileges via a specially crafted GET request to the /goform/ URI or via the ExportSettings function...

CVE-2024-22543: Insufficient Session Expiration

An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...

AC6 Stack Buffer Overflow Vulnerability in Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tenda Technology Co., Ltd AC6 is a dual-band wireless router from Tenda Tenda, supporting IPv4 and IPv6 protocols, adopting 802.11ac/n wireless standard and providing 1167Mbps wireless transmission rate. Ltd. AC6 suffers from a stack buffer overflow vulnerability that originates...

PT-2024-19476 · Linksys · Linksys Router E1700

Name of the Vulnerable Software and Affected Versions: Linksys Router E1700 version 1.0.04 build 3 Description: An issue was discovered in the Linksys Router E1700, allowing authenticated attackers to escalate privileges. This can be achieved via a crafted GET request to the "/goform/" URI or...

PT-2024-12027

Name of the Vulnerable Software and Affected Versions Tenda AC6 version US AC6V5.0re V03.03.02.01 cn TDC01 Description A stack overflow issue allows attackers to run arbitrary commands via a crafted POST request to "/goform/PowerSaveSet". This can be exploited by sending a specifically designed...

CVE-2023-24332: Stack-based Buffer Overflow

A stack overflow vulnerability in Tenda AC6 with firmware version USAC6V5.0reV03.03.02.01cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet...

PT-2024-12028

Name of the Vulnerable Software and Affected Versions Tenda AC21 version US AC21V1.0re V16.03.08.15 cn TDC01 Description A stack overflow issue allows attackers to run arbitrary commands via a crafted POST request to the "/goform/openSchedWifi" API endpoint. This enables potential exploitation fo...