3669 matches found
CVE-2023-49434: Out-of-bounds Write
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList...
CVE-2023-49436: Improper Neutralization of Special Elements used in a Command
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...
CVE-2023-49432: Out-of-bounds Write
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg...
CVE-2023-49409: Undefined Security Weakness
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49406: Undefined Security Weakness
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49425: Out-of-bounds Write
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg...
CVE-2023-49431: Improper Neutralization of Special Elements used in a Command
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...
PT-2023-31220
Name of the Vulnerable Software and Affected Versions Tenda AX9 version V22.03.01.46 Description A stack overflow issue has been identified in the list parameter at the "/goform/SetStaticRouteCfg" API endpoint. This issue can be exploited, potentially leading to unintended consequences. No...
PT-2023-31226
Name of the Vulnerable Software and Affected Versions Tenda AX12 version V22.03.01.46 Description A command injection issue has been discovered in the list parameter at the "/goform/SetNetControlList" API endpoint. This allows for potential command injection attacks. Recommendations For Tenda AX1...
PT-2023-7507 · Tenda · Tenda Ax9
Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: The issue is related to a SQL command injection vulnerability in the setDeviceInfo feature. This vulnerability can be exploited through the mac parameter at the "/goform/setModules" API endpoint. Th...
CVE-2023-49429: Improper Neutralization of Special Elements used in an SQL Command
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...
PT-2023-31222
Name of the Vulnerable Software and Affected Versions Tenda AX9 version V22.03.01.46 Description A stack overflow issue has been identified in the list parameter at the "/goform/SetVirtualServerCfg" API endpoint. This issue can be exploited, potentially leading to unintended consequences...
Tenda AX9 Security Vulnerability
Tenda AX9 is a Wi-Fi 6 router from Tenda, China. A security vulnerability exists in Tenda AX9 version V22.03.01.46, which was discovered to contain a command injection vulnerability via the "list" parameter of /goform/SetNetControlList...
CVE-2023-49426: Out-of-bounds Write
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg...
CVE-2023-49430: Out-of-bounds Write
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...
PT-2023-31223
Name of the Vulnerable Software and Affected Versions Tenda AX9 version V22.03.01.46 Description A stack overflow issue has been identified in the list parameter at the "/goform/SetNetControlList" API endpoint. This issue can be exploited, potentially leading to unintended consequences...
CVE-2023-48963
Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/wifiSSIDget...
Buffer overflow
Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/wifiSSIDget...
