24276 matches found
PT-2026-91062
Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.61068 1546 841 CN TDC Description A stack-based buffer overflow exists in the HTTP Handler component. The issue occurs within the formIPMacBindAdd function when processing the IPMacBindRule argument. This flaw allows...
CVE-2026-67822
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-67822
The Tenda W6-S wireless access point (firmware v1.0.0.4(510) ) is vulnerable to a stack-based buffer overflow in the formwrlSSIDset() function, which handles the /goform/wifiSSIDset endpoint. The root cause is the use of sprintf to copy user-controlled GO and index parameters into a fixed 64-byte...
EUVD-2026-51587
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-67822: Stack-based Buffer Overflow
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-67822
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
PT-2026-66786
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-67822
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
CVE-2026-67822
Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...
Tenda TX9 sub_42EEE0 function buffer overflow vulnerability
Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the sub42EEE0 function in the file/goform/SetStaticRouteCfg, which fails to properly validate the length of the input...
Tenda TX9 update_dev_name function buffer overflow vulnerability
Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the updatedevname function in the file/goform/SetOnlineDevName, which fails to properly validate the length of the input...
Tenda TX9 sub_425964 function buffer overflow vulnerability
Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the sub425964 function in the file/goform/SetOnlineDevName, which fails to properly validate the length of the input dat...
PT-2026-78869
Уязвимость функций formSetDeviceName и set device name файла US AC1206V1.0RTL V15.03.06.23 multi TD01.bin микропрограммного обеспечения маршрутизатора Tenda AC12 связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказа...
PT-2026-78870
Уязвимость функций set wl guest iplist и fromSetWifiGusetBasic маршрутизатора Tenda AC12 связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемо...
PT-2026-78871
Уязвимость функции formSetRebootTimer файла US AC1206V1.0RTL V15.03.06.23 multi TD01.bin маршрутизатора Tenda AC12 связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостнос...
Tenda AC10 buffer overflow vulnerability
The Tenda AC10 is a wireless router device produced by the Chinese company Tenda. The Tenda AC10 has a buffer overflow vulnerability. This vulnerability stems from a function in the httpd/netctrl component called fromAdvSetLanip, which handles operations on the GetValue/SetValue parameters, leadi...
The vulnerability of the HTTP-handler fromAdvSetLanip in the microprogramming software for Tenda AC10 allows a attacker to execute arbitrary code, damage memory, or cause a service failure.
The vulnerability of the HTTP-handler fromAdvSetLanip in the Tenda AC10 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code, damage memory, or cause a service...
EUVD-2024-55692
The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...