CVE-2023-30372: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, The function "xkjsver32" contains a stack-based buffer overflow vulnerability...

CVE-2023-30375

The CVE-2023-30375 entry affects Tenda AC15 router, specifically version V15.03.05.19, where the stack-based buffer overflow exists in the getIfIp function. The issue is triggered remotely over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a base score of 9.8 (CRITICAL). Docum...

CVE-2023-30373: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-30375

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability...

CVE-2023-30372

CVE-2023-30372 affects Tenda AC15 V15.03.05.19: the stack-based overflow in the xkjs_ver32 function. CVSS v3.1 base score 9.8 (Critical) with NETWORK attack vector, no user interaction required; impacts to confidentiality, integrity, and availability are HIGH. The vulnerability stems from a stack...

CVE-2023-30371

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-30370

CVE-2023-30370 affects the Tenda AC15 router specifically version V15.03.05.19. The vulnerability is a stack-based overflow in the GetValue function, which can lead to complete compromise of affected devices. The CVE’s published metrics indicate a 9.8/10 CRITICAL base score with network access re...

CVE-2023-30371: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-30373

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

PT-2023-22663

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the getIfIp function. This vulnerability can potentially be exploited, but no information is provided about the estimated number ...

PT-2023-22664

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the henan pppoe user function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the henan pppoe user functi...

PT-2023-22662

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the xian pppoe user function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the xian pppoe user function...

PT-2023-22659

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the GetValue function. This vulnerability can be exploited, potentially leading to unauthorized access or code execution. However...

CVE-2023-30370: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability...

CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

PT-2023-22665

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the sub 8EE8 function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the sub 8EE8 function as a temporar...

Debian: Security Advisory (DLA-3397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-30376

In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-27355: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper...

CVE-2023-27355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper...