PT-2023-22659

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the GetValue function. This vulnerability can be exploited, potentially leading to unauthorized access or code execution. However...

CVE-2023-30375: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability...

PT-2023-22663

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the getIfIp function. This vulnerability can potentially be exploited, but no information is provided about the estimated number ...

Tenda AC15 缓冲区错误漏洞

Tenda AC15 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC15 version V15.03.05.19, which originates from a stack-based buffer overflow vulnerability in function xkjsver32...

CVE-2023-30372

In Tenda AC15 V15.03.05.19, The function "xkjsver32" contains a stack-based buffer overflow vulnerability...

CVE-2023-30371

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

(Pwn2Own) Oracle VirtualBox TPM MMIO Handling Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

Debian: Security Advisory (DLA-3397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-30378: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30371: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-30376

CVE-2023-30376 concerns a stack-based buffer overflow in the function henan_pppoe_user of the router firmware for Tenda AC15 V15.03.05.19 . The vulnerability is characterized as a network-exploitable issue with a base score of 9.8 (CRITICAL) under CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). T...

CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30375

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability...

CVE-2023-30373

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-30372

CVE-2023-30372 affects Tenda AC15 V15.03.05.19: the stack-based overflow in the xkjs_ver32 function. CVSS v3.1 base score 9.8 (Critical) with NETWORK attack vector, no user interaction required; impacts to confidentiality, integrity, and availability are HIGH. The vulnerability stems from a stack...

CVE-2023-30376: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-30373: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

PT-2023-22665

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the sub 8EE8 function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the sub 8EE8 function as a temporar...

CVE-2023-27355: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper...