CVE-2025-57636

The CVE-2025-57636 entry describes an OS command injection in the D-Link C1 device. Affected component: jhttpd; vulnerable function sub_47F028; exploitation via the HTTP parameter time. Impact per PT-2025-39210: potential unauthorized system access. Affected versions are those prior to 2020-02-21...

CVE-2025-57636

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

CVE-2025-57636

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

VulnCheck KEV: CVE-2025-34152

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...

📄 Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated Remote Code Execution

This Metasploit module exploits an unauthenticated remote command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. The vulnerability lies in the time parameter of the time configuration endpoint, which is passed unsanitized to a shell command executed via th...

Tenda AC6 fromSetSysTime function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the time parameter in the...

CVE-2025-55603

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...

CVE-2025-55498

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...

Tenda M3 /goform/getMasterPassengerAnalyseData File Stack Buffer Overflow Vulnerability

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 there is a stack buffer overflow vulnerability, the vulnerability stems from /goform/getMasterPassengerAnalyseData file in the...

CVE-2025-9299

A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely...

CVE-2025-9299

A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely...

Tenda M3 安全漏洞

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 there is a stack buffer overflow vulnerability, the vulnerability stems from /goform/getMasterPassengerAnalyseData file in the...

CVE-2025-55498

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...

CVE-2025-55498

CVE-2025-55498 affects Tenda AC6 (model 15.03.06.23_multi). The vulnerability is a buffer overflow in the fromSetSysTime() function caused by improper validation of the length of the time parameter, which can lead to denial of service. Public details across CNVD/CNVD/CNNVD/Red Hat/NVD references ...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the time parameter in the...

Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19580)

The Tenda AC20 is a wireless router from the Chinese company Tenda. Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/saveParentControlInfo that fails to correctly validate the length and size of the input data, which can be...

CVE-2025-55498

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...

CVE-2025-55498

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...

PT-2025-34067 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.23 multi Description: The Tenda AC6 version 15.03.06.23 multi contains a buffer overflow via the time parameter in the fromSetSysTime function. Recommendations: At the moment, there is no information about a newer...

CVE-2025-8940 Tenda AC20 saveParentControlInfo strcpy buffer overflow

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to t...