PT-2023-27710

Name of the Vulnerable Software and Affected Versions Tenda AC9 version V3.0BR V15.03.06.42 multi TD01 Description A stack overflow issue was discovered via the firewall value parameter at the "/goform/SetFirewallCfg" API endpoint. Recommendations For Tenda AC9 version V3.0BR V15.03.06.42 multi...

CVE-2021-40546: Improper Resource Shutdown or Release

Tenda AC6 USAC6V4.0RTLV02.03.01.26cn.bin allows attackers who have the administrator password to cause a denial of service device crash via a long string in the wifiPwd5G parameter to /goform/setWifi...

The vulnerability of the /goform/SetIpMacBind component in the Tenda AC8 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/SetIpMacBind component in Tenda AC8 software lies in the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

CVE-2023-41558

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

CVE-2023-41556

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind...

Stack overflow

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

Stack overflow

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a home wireless router launched by Tenda brand, which is mainly positioned as a wall-penetrating enhanced dual-band gigabit device for home network coverage needs. The Tenda AC7 suffers from a stack buffer overflow vulnerability, which originates from the security5g parameter of...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the list parameter of /goform/SetIpMacBind...

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a dual-band wireless router with a strong signal and stable performance for large, multi-bedroom users. The Tenda AC7 suffers from a stack buffer overflow vulnerability that originates from the timeZone parameter of /goform/SetSysTimeCfg failing to correctly validate the length a...

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the ssid parameter of /goform/fastsettingwifiset...

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the mitInterface parameter of /goform/addressNat...

CVE-2023-41562

CVE-2023-41562 affects Tenda routers: AC7 v1.0 (V15.03.06.44), AC9 v3.0 (V15.03.06.42_multi), and AC5 (US_AC5V1.0RTL_V15.03.06.28). The vulnerability is a stack overflow triggered by the time parameter in the /goform/PowerSaveSet API. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL)...

CVE-2023-41554: Out-of-bounds Write

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

CVE-2023-41552: Out-of-bounds Write

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

CVE-2023-41563

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo...

CVE-2023-41561

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg...

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...