PT-2025-39080

Name of the Vulnerable Software and Affected Versions Tenda AC20 versions up to 16.03.08.12 Description A flaw exists in Tenda AC20 that allows for remote buffer overflow. The issue is related to the strcpy function within the /goform/SetPptpServerCfg file of the HTTP POST Request Handler...

Tenda AC23 安全漏洞

Tenda AC23 is a dual-band wireless router from Tenda that supports 802.11acWave2 technology with dual-band concurrent transmission rates up to 2033Mbps, including up to 1733Mbps in the 5GHz band, which is suitable for high-bandwidth applications such as 4K video and online live streaming. Tenda...

CVE-2022-25460

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

CVE-2022-43025

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg...

CVE-2022-43026

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg...

CVE-2025-3346: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

Tenda RX3 安全漏洞

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a SetPptpServerCfg buffer overflow vulnerability, which originates from the startIp and endIp parameters in...

CVE-2025-29357: Improper Resource Shutdown or Release

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

The vulnerability of the formSetCfm function (implemented by goform/setcfm) in the Tenda AC10U router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetPPTPServer /goform/SetPptpServerCfg function in the Tenda AC10U router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2024-2488: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIP leads to stack-based buffer overflow. The attack may be initiated remotely. The...

CVE-2023-41561

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg...

CVE-2023-41561

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC9, which is caused by a buffer overflow issue in the startIp and endIp parameters of /goform/SetPptpServerCfg...

CVE-2023-41561

The CVE-2023-41561 issue affects Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28. A stack overflow is triggered via parameters startIp and endIp in the API endpoint /goform/SetPptpServerCfg. The connected documents confirm the affected products and the vulnerable parame...

CVE-2022-43025

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg...

Stack overflow

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg...

CVE-2022-43026

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg...

CVE-2022-43025

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg...

CVE-2022-43025: Out-of-bounds Write

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg...

CVE-2022-43026: Out-of-bounds Write

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg...