CVE-2025-8160 Tenda AC20 httpd SetSysTimeCfg buffer overflow

A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of the argument timeZone leads to buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-51085

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...

CVE-2025-51085

Affected software: Tenda AC8V4 (firmware V16.03.34.06). Vulnerability: stack-based buffer overflow in the /goform/SetSysTimeCfg API caused by improper handling of timeZone/timeType parameters. Impact: potential crash of the application (availability impact cited as LOW); exploitation details are ...

CVE-2025-51085

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...

Tenda AC6 SetSysTimeCfg function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the failure of the time parameter in the SetSysTimeCfg function to correctly validate the length and size of the input data, which can be exploited by an attacker to...

CVE-2025-50258

Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...

CVE-2025-50258

Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...

CVE-2025-50258

Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...

PT-2025-27800 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the SetSysTimeCfg function via the time parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, consider restricting access to the...

CVE-2025-50258

CVE-2025-50258 affects Tenda AC6 (v15.03.05.16_multi). The vulnerability is a buffer overflow in the SetSysTimeCfg function caused by unsafe handling of the time parameter. The available metrics rate the impact as high confidentiality, integrity, and availability, with network attack vector, high...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the failure of the time parameter in the SetSysTimeCfg function to correctly validate the length and size of the input data, which can be exploited by an attacker to...

CVE-2025-50258

Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...

CVE-2025-6887 Tenda AC5 SetSysTimeCfg stack-based overflow

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2025-6887

CVE-2025-6887 affects Tenda AC5, specifically the stack-based overflow in /goform/SetSysTimeCfg caused by improper validation of the time/timeZone input. Affects version 15.03.06.47; vulnerability is exploitable remotely and publicly disclosed. Multiple sources (CNVD, Red Hat/CVE summaries, CNVD ...

CVE-2023-24212

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

CVE-2022-25457

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2025-29360

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2024-8225

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...