3669 matches found
CVE-2023-40899
CVE-2023-40899 affects Tenda AC8 (v4, US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow in the HTTP API endpoint /goform/setMacFilterCfg triggered by the macFilterType and deviceList parameters, potentially crashing the application or allowing arbitrary code execution in the af...
CVE-2023-40893
CVE-2023-40893 affects Tenda AC8 (v4 US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow triggered by the time parameter to /goform/PowerSaveSet. Public documents describe potential for crashing the application and, in some sources, arbitrary code execution in the application con...
CVE-2023-40892
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi...
CVE-2023-40899
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg...
CVE-2023-40902
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...
CVE-2023-40904
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg...
PT-2023-4612 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 version v4 US AC10V4.0si V16.03.10.13 cn Description: The issue is related to a stack overflow vulnerability via the parameter list and bindnum at the "/goform/SetIpMacBind" API endpoint. This vulnerability may allow a remote...
Tenda AC8 缓冲区错误漏洞
Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...
PT-2023-27695 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the macFilterType and deviceList parameters at the "/goform/setMacFilterCfg" API endpoint. This issue affects the Tenda AC10 v4 router...
CVE-2023-40896
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...
CVE-2023-40898: Out-of-bounds Write
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...
PT-2023-27691
Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via the timeZone parameter at the "/goform/SetSysTimeCfg" API endpoint. This issue affects the Tenda AC8 router. Recommendations For Tenda AC8...
CVE-2023-40899: Out-of-bounds Write
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg...
PT-2023-27689
Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via the parameter list at the "/goform/SetVirtualServerCfg" API endpoint. This issue affects the Tenda AC8 device. Recommendations For Tenda AC8...
CVE-2023-40896
This CVE affects Tenda AC8 devices. A stack overflow is triggered via the parameter list and bindnum in /goform/SetIpMacBind on Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn. Public descriptions consistently state a stack overflow that can crash the application, with some sources noting potential cod...
PT-2023-4611
Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description The issue is related to a stack overflow vulnerability via the parameter list and bindnum at the "/goform/SetIpMacBind" API endpoint. This vulnerability can be exploited by a remote...
CVE-2023-33534: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goformsetcmdprocess...
CVE-2023-33534
A Cross-Site Request Forgery CSRF in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goformsetcmdprocess...
Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G 跨站请求伪造漏洞
The Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G is a mobile network wireless router from Guangzhou Tozed Kangwei Intelligent Technology. A security vulnerability exists in the Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G S10G3.11.6, which allows an attacker to take over a user'...
