The vulnerability of the SetClientState() function in Tenda AC6 software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetClientState function in Tenda AC6 microprogramming router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version 15.03.06.50, which is caused by the SetClientState function failing to properly validate the length of the input data, and can be exploited by an attacker to execute...

CVE-2025-60340: Buffer Copy without Checking Size of Input

Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters...

CVE-2025-60340

The Tenda AC6 wireless router (firmware version 15.03.06.50 ) is vulnerable to multiple buffer overflows within the SetClientState function. The root cause is a failure to properly validate the length of input data when processing specific parameters, including limitSpeed , deviceId , and limitSp...

CVE-2025-60340

Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters...

PT-2025-43397

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.50 Description The SetClientState function contains buffer overflow flaws. Attackers can leverage these flaws to trigger a Denial of Service DoS condition by injecting a specially crafted payload into the limitSpeed,...

CVE-2022-46533

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState...

CVE-2022-46536

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState...

PT-2024-2554

Name of the Vulnerable Software and Affected Versions Tenda AC10U version 15.03.06.48 Description The issue is related to a stack overflow vulnerability in the formSetClientState function, specifically affecting the deviceId, limitSpeed, and limitSpeedUp parameters. This vulnerability can be...

CVE-2024-2983

A vulnerability was found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be...

PT-2024-23069 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue was found in the function formSetClientState of the file /goform/SetClientState. The manipulation of the arguments deviceId, limitSpeed, and limitSpeedUp leads to a stack-based...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a dual-band wireless router from the Tenda brand, designed for large homes, small offices, or business and leisure areas, and designed to provide stable wireless network coverage and high-speed transmission. The Tenda FH1202 suffers from a stack buffer overflow vulnerability...

CVE-2022-46536

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState...

Buffer overflow

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...

Buffer overflow

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState...

Buffer overflow

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState...

CVE-2022-46535

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...

PT-2022-27889

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered, which can be triggered via the deviceId parameter at the "/goform/SetClientState" API endpoint. Recommendations For Tenda F1203 version 2.0.1.6, avoid using the...

PT-2022-27887

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered via the limitSpeed parameter at the "/goform/SetClientState" API endpoint. This issue allows for potential exploitation. No information is provided about the...

CVE-2022-46533: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState...