28587 matches found
Tenda AC8 sscanf DoS
The vulnerability of the sscanf function in Tenda AC8 router microprogramming software relates to the possibility of writing beyond the buffer in memory when processing the time parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Tenda AC8 Router Code Execution
The vulnerability of the setSmartPowerManagement function in Tenda AC8 router software lies in the ability to write data beyond the buffer in memory during the processing of the time parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...
Tenda AC8 Router DoS
The vulnerability of the setqosMiblist function in the Tenda AC8 router’s microprogramming software lies in the ability to write data beyond the buffer in memory during the processing of the list parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure...
Tenda AC8 Router Code Execution
The vulnerability of the setSchedWifi function in Tenda AC8 router microprogramming software lies in the possibility of writing data beyond the buffer in memory when processing the parameters schedStartTime and schedEndTime. Exploiting this vulnerability could allow a remote attacker to execute...
Tenda AC8 Router DoS
The vulnerability of the savevirtualserdata function in Tenda AC8 router microprogramming software lies in the ability to write data beyond the buffer into memory during the processing of the list parameter. Exploiting this vulnerability could allow a remote attacker to cause service interruption...
Wavlink M86X3A Router Sub_400B90 Function DoS
The vulnerability of the sub400B90 function in the /cgi-bin/ExportAllSettings.cgi script of the Wavlink M86X3A router’s microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a servic...
Wavlink Router Set Sys Adm Command Execution
The vulnerability of the setsysadm function in the microprogramming-based routing software of Wavlink WL-WN530H4 lies in the lack of measures taken to sanitize data at the control level when processing the newpass parameter. Exploiting this vulnerability allows a remote attacker to execute...
Beetel 777VR1 Access Control Vulnerability
Beetel 777VR1 is a router produced by the Beetel company. Versions of Beetel 777VR1 starting from 01.00.09/01.00.0955 and earlier have a vulnerability related to access control. This vulnerability stems from operations involving the UART interface component, which may lead to information leakage...
CVE-2025-69764
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of JWT authentication middleware and RBAC authorization checks in the routing configuration for /api/v1/jobs endpoint. An attacker can view, update, and delete jobs by sending...
D-link DIR-823X Router Arbitrary Command Execution
The vulnerability of the sub412E7C function in D-link DIR-823X router microprogramming software is related to the failure to take measures to neutralize special elements during the processing of the wdenable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
CVE-2021-47854
CVE-2021-47854 affects DD-WRT 45723 and describes a buffer overflow in the UPNP network discovery service. The vulnerability is triggered by receiving crafted M-SEARCH packets with oversized UUID payloads, which can lead to remote code execution on the targeted device. The CVSS metrics indicate a...
CVE-2021-47802
Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without...
CVE-2021-47802 Tenda D151 & D301 - Configuration Download
Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without...
CVE-2021-47802
CVE-2021-47802 affects Tenda D151 and D301 routers. The issue is an unauthenticated configuration download vulnerability reachable via /goform/getimage, permitting remote attackers to retrieve router configuration data, including admin credentials. The provided connected sources corroborate the v...
EUVD-2026-3650
Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without...
Tenda AX1803 security vulnerabilities
The Tenda AX1803 is a dual-band Gigabit WIFI6 router produced by the Chinese company Tenda. The Tenda AX1803 v1.0.0.1 version contains a security vulnerability. This vulnerability stems from a stack overflow in the security5g parameter within the sub727F4 function, which may lead to a...
CVE-2025-70650
The Tenda AX-1806 Wi-Fi6 wireless router (version 1.0.0.1 ) contains a stack-based buffer overflow vulnerability within the deviceList parameter of the formSetMacFilterCfg function in its microprogramming software. A remote attacker can exploit this flaw by sending a crafted request to cause a De...
CVE-2025-70651
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...