Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. The Tenda AX1803 version 1.0.0.1 suffers from a buffer overflow vulnerability that originates from the parameter serverName/ddnsUser/ddnsPwd/ddnsDomain failing to correctly validate the length and size of the input data, which can...

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a attacker to perform XSS attacks.

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2024-4169

A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the function sub42775C/sub4279CC. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this vulnerability i...

Tenda FH1206 entrys parameter buffer overflow vulnerability

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of input data via the entrys parameter in ip/goform/RouteStatic, which can be exploited by an attacker to cause a...

Tenda W15E 安全漏洞

Tenda W15E is a wireless router from Tenda, China. A security vulnerability exists in the Tenda W15E version 15.11.0.14, which is caused by a buffer overflow vulnerability in the manualTime parameter of the formSetSysTime method of the /goform/SetSysTimeCfg file...

CVE-2024-33215

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat...

Tenda AC8 安全漏洞

The Tenda AC8 is a router product that is primarily used for network connectivity in homes and small offices. Tenda AC8 has a stack buffer overflow vulnerability in the formSetRebootTimer function of the /goform/SetRebootTimer file in version 16.03.34.09. An attacker can use this vulnerability to...

Tenda AC8 安全漏洞

The Tenda AC8 is a router device that provides network connectivity and data transfer capabilities. A security vulnerability exists in Tenda AC8 version 16.03.34.09, which originates from a buffer overflow vulnerability in the function fromAdvSetMacMtuWan in file /goform/AdvSetMacMtuWan. No detai...

CVE-2024-33214

CVE-2024-33214 affects Tenda FH1206 routers (V1.2.0.8(8155)_EN). The vulnerability is a stack-based buffer overflow in the IP route configuration path (ip/goform/RouteStatic) triggered by the entrys parameter. Impact is availability loss (I: HIGH) with no confidentiality or integrity impact per t...

Tenda AC7 Command Injection Vulnerability

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts the 802.11ac standard and supports dual-band concurrent transmission with a wireless rate of up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from the...

The vulnerability of the formWriteFacMac function (/goform/WriteFacMac) in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of the formWriteFacMac function /goform/WriteFacMac in the Tenda AC500 router software lies in the lack of data cleaning at the control level when processing the mac parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

TOTOLINK N300RT 安全漏洞

The TOTOLINK N300RT is a wireless router designed for home and small business users. The TOTOLINK N300RT suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the Access Control feature on the Wireless page, which c...

Tenda FH1203 安全漏洞

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failing to properly filter construct command special characters,...

Planex MZK-MF300N 命令注入漏洞

The Planex MZK-MF300N is a world's smallest wireless LAN multi-pocket router from Planex Japan. An operating system command injection vulnerability exists in the Planex MZK-MF300N. An attacker could exploit this vulnerability to execute arbitrary commands by sending specially crafted requests to...

Tenda AC18 /goform/exeCommand Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability that stems from the failure to properly filter construct command special characters, commands...

TP-LINK AC1350 命令注入漏洞

The TP-LINK AC1350/N300 is a router from China P&L TP-LINK. The TP-LINK AC1350 and TP-LINK N300 suffer from a command injection vulnerability that stems from the tddpd enabletestmode function failing to correctly filter constructed command special characters, commands, and so on. An attacker can...

TP-LINK AC1350 命令注入漏洞

The TP-LINK AC1350/N300 is a router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK AC1350/N300, which can be exploited by an attacker to cause arbitrary commands to be executed via a series of specially crafted network requests...

TP-LINK AC1350 安全漏洞

The TP-LINK AC1350 is a router from China P&L TP-LINK. The TP-LINK AC1350 suffers from a security vulnerability that can be exploited by an attacker to cause a reset to factory settings via a series of specially crafted network requests...

TP-LINK AC1350 缓冲区错误漏洞

The TP-LINK AC1350 is a router from China P&L TP-LINK. The TP-LINK AC1350 contains a security vulnerability that can be exploited by an attacker to cause remote code execution via a series of specially crafted HTTP requests...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability that stems from the failure to properly filter construct command special characters, commands...