Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetPptpServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

PT-2022-12688

Name of the Vulnerable Software and Affected Versions Tenda-AX3 router version V16.03.12.10 CN Description The issue is related to a stack buffer overflow in the formSetPPTPServer function. The v10 variable is directly retrieved from the HTTP request parameter startIp without any security checks,...

PT-2022-12689

Name of the Vulnerable Software and Affected Versions Tenda-AX3 router version V16.03.12.10 CN Description The issue is related to a stack buffer overflow vulnerability in the formSetPPTPServer function. The v13 variable is directly retrieved from the HTTP request parameter startIp without any...