Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability that stems from the presence of a buffer overflow via the SetRouteStatic function. No detailed...

The vulnerability of the ConfigFileUpload() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the ConfigFileUpload function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2022-40845

The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

PT-2022-25575 · Tenda · Tenda Ac1200 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router model W15Ev2 version V15.11.0.101576 Description: A Stored Cross Site Scripting XSS issue exists, allowing an attacker to execute JavaScript code via the application's website filtering tab, specifically the URL body...

The vulnerability of D-Link DIR-846 router’s microprogramming software lies in the insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-846 router’s microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request /HNAP1/ within the...

The vulnerability of NETGEAR R6220 Wi-Fi routers’ microprogramming software, related to the lack of measures taken to clean data at the control level, allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR R6220 Wi-Fi routers’ microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

CVE-2022-43109

D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet...

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows a hacker to trigger a service failure.

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands throug...

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the /goform/form2IPQoSTcAdd parameter...

D-Link DIR-816 A2 操作系统命令注入漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. An operating system command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which stems from multiple command injection vulnerabilities in the admuser parameter and admpass parameter of...

Tenda 11N 授权问题漏洞

Tenda 11N is a router from Tenda, a Chinese company. A security vulnerability exists in the Tenda 11N version V5.07.33cn, which can be exploited to bypass login authentication...

CVE-2022-43026

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg...

Tenda TX3 缓冲区错误漏洞

Tenda TX3 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda TX3 that originates from the endIp parameter of /goform/SetPptpServerCfg containing a stack overflow. No details of the vulnerability are provided at this time...

TP-LINK TL-WR841N 跨站脚本漏洞

TP-Link TL-WR841N is a wireless router from TP-LINK, China. TP-Link TL-WR841N is vulnerable to a cross-site scripting vulnerability, which originates from a front-end that does not filter special characters and can be exploited by attackers to cause cross-site scripting attacks...

NETGEAR R6220 安全漏洞

The NETGEAR R6220 is a wireless router from NETGEAR. The NETGEAR R6220 suffers from a command execution vulnerability that is due to improper access control. An attacker could exploit the vulnerability to execute arbitrary commands on the system...

Tenda AC1900 安全漏洞

Tenda AC1900 is a series of routers from Tenda China. A security vulnerability exists in the Tenda AC1900 AP500USV1180320Beta, which originates from a buffer overflow in the 0x32384 function, and can be exploited by an attacker to cause a denial of service DoS via a crafted request...

Tenda AC1200 安全漏洞

The Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x47c5dc function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted...

The vulnerability of the anweb microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-2150 router’s microprogrammed software service is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...