CVE-2022-28560

The CVE-2022-28560 entry concerns Tenda AC9 (firmware 15.03.2.21_cn) with a stack overflow in the httpd service’s goform/fast_setting_wifi_set function. This vulnerability allows an attacker to trigger a stable shell via a carefully crafted payload. CVSSv3.1 vector: Network, Privileges NONE, User...

Tenda AX12 缓冲区错误漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.Tenda AX12 is vulnerable to a buffer overflow vulnerability, which originates from the /goform/setMacFilterCfg function in the httpd service that does not properly validate data boundaries when performing operations on...

Exploit for Classic Buffer Overflow in Asus Rt-Ax86U_Firmware

CVE-2020-36109-POC Feb 13 2021, Altin Thartori, github.com/t...

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38543)

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

Stack overflow

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...

Stack overflow

There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

CVE-2022-27022

CVE-2022-27022 is a stack overflow in the SetSysTimeCfg() function of the httpd service on Tenda AC9 V15.03.2.21_cn. An attacker can obtain a stable root shell via a crafted payload. Affected software: Tenda AC9 (httpd). Root cause: stack overflow in SetSysTimeCfg(); impact: remote code execution...

CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...

CVE-2022-27016

CVE-2022-27016 affects Tenda AC9, specifically the httpd service with firmware 15.03.2.21_cn. The vulnerability is a stack overflow in SetStaticRouteCfg(), as described across multiple sources (CNVD/CNNVD, NVD, Red Hat, CVE listing). Exploitation could allow an attacker to obtain a root shell via...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...

httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling

A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling...

TP-Link TL-WR940N httpd newBridgessid Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue...

TP-Link TL-WR940N httpd Improper Access Control Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...

CVE-2021-34865

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by default. The...

PT-2021-6473 · NetGear · Netgear Rax50 +20

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6400 versions affected versions not specified NETGEAR R6400v2 versions affected versions not specified NETGEAR R6900P versions affected versions not specified NETGEAR R7000 versions affected...