CVE-2025-6887 Tenda AC5 SetSysTimeCfg stack-based overflow

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2025-6887

CVE-2025-6887 affects Tenda AC5, specifically the stack-based overflow in /goform/SetSysTimeCfg caused by improper validation of the time/timeZone input. Affects version 15.03.06.47; vulnerability is exploitable remotely and publicly disclosed. Multiple sources (CNVD, Red Hat/CVE summaries, CNVD ...

CVE-2025-6887: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2023-24212

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

CVE-2022-25457

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2025-29360

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-29360: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2024-8225

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-8225 Tenda G3 SetSysTimeCfg formSetSysTime stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

PT-2024-8673 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 15.11.0.20 Description: The issue is related to a stack-based buffer overflow in the formSetSysTime function of the Tenda G3 wireless access point. This can be exploited by sending specially crafted POST requests to the...

The vulnerability of the sub_42D4DC() function (/goform/SetSysTimeCfg) in the Tenda TX9 Pro router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42D4DC function /goform/SetSysTimeCfg of the Tenda TX9 Pro router’s microprogramming system is related to the issue of the operation exceeding the buffer boundaries in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to...

CVE-2024-4126

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument manualTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2024-4126 Tenda W15E SetSysTimeCfg formSetSysTime stack-based overflow

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument manualTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

Tenda W15E 安全漏洞

Tenda W15E is a wireless router from Tenda, China. A security vulnerability exists in the Tenda W15E version 15.11.0.14, which is caused by a buffer overflow vulnerability in the manualTime parameter of the formSetSysTime method of the /goform/SetSysTimeCfg file...

Tenda TX9 安全漏洞

Tenda TX9 is a dual-band Wi-Fi 6 router from Tenda, China. A security vulnerability exists in the Tenda TX9 version 22.03.02.10, which originates from a buffer overflow vulnerability in the time parameter of the sub42D4DC method of the /goform/SetSysTimeCfg file, where manipulation of the...

CVE-2024-2856 Tenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone leads to stack-based buffer overflow. The attack may be...

CVE-2024-2855 Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20. Affected by this vulnerability is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be launched...

Tenda AC15 安全漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC15 version 15.03.05.18, which is caused by a stack-based buffer overflow in the time parameter of the fromSetSysTime method on the /goform/SetSysTimeCfg page...