117 matches found
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
Command injection
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
EUVD-2022-38990
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
PT-2022-23288 · Tenda · Tenda Ac9
Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 cn Description: The issue is related to command injection via the "goform/SetSysTimeCfg" API endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated...
CVE-2022-36273: Improper Neutralization of Special Elements used in an OS Command
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-30040
Tenda AX1803 v1.0.0.12890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to...
CVE-2022-30040
Tenda AX1803 v1.0.0.12890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to...
Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38543)
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...
CVE-2022-27022
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
CVE-2022-27022
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
CVE-2022-27022
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
Stack overflow
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
CVE-2022-27022
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
CVE-2022-27022
CVE-2022-27022 is a stack overflow in the SetSysTimeCfg() function of the httpd service on Tenda AC9 V15.03.2.21_cn. An attacker can obtain a stable root shell via a crafted payload. Affected software: Tenda AC9 (httpd). Root cause: stack overflow in SetSysTimeCfg(); impact: remote code execution...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...
CVE-2022-25440
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...
CVE-2022-25440
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...