CVE-2022-25427

CVE-2022-25427 affects Tenda AC9, specifically v15.03.2.21. The openSchedWifi function contains a stack overflow via the schedendtime parameter, which CNVD/CNNVD reports as enabling arbitrary command execution. The NVD/CVE records classify impact as high/critical (network attack, no user interact...

CVE-2022-25427

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function...

CVE-2022-25447: Out-of-bounds Write

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function...

CVE-2022-25427: Out-of-bounds Write

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function...

CVE-2022-24155

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

CVE-2022-24155

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

CVE-2022-24155

CVE-2022-24155 concerns Tenda AX3 devices (example: v16.03.12.10_CN) with a heap overflow in the function setSchedWifi , allowing a potential attacker to trigger a Denial of Service via the schedStartTime and schedEndTime parameters. The vulnerability is described as a heap overflow that can be e...

CVE-2022-24155: Out-of-bounds Write

Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31386)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in multiple Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'schedStartTime' and 'schedEndTime' parameters to the...

CVE-2020-13389

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...