564 matches found
Tenda O3V2 /goform/setSysTimeInfo file buffer overflow vulnerability
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. The Tenda O3V2 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/setSysTimeInfo that fails to correctly validate the length of the input data, and can be exploited by an attacker t...
Tenda O3V2 security vulnerabilities
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. The Tenda O3V2 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/setSysTimeInfo that fails to correctly validate the length of the input data, and can be exploited by an attacker t...
CVE-2025-50258
Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...
CVE-2025-50258: Buffer Copy without Checking Size of Input
Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...
CVE-2025-6897
A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpddebug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used...
Tenda AC6 Router Code Execution
The vulnerability of the setSmartPowerManagement function in Tenda AC6 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause...
Tenda AC5 Router formSetRebootTimer Buffer Overflow
The vulnerability of the formSetRebootTimer function /goform/SetRebootTimer in the Tenda AC5 router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the rebootTime parameter. Exploiting this vulnerability allows an...
Tenda AC15 Router Formsetschedled XSS
The vulnerability of the formsetschedled function /goform/SetLEDCf in the Tenda AC15 router’s microprogramming software is related to the operation of writing data beyond the buffer in memory when processing the Time parameter. Exploiting this vulnerability can allow a remote attacker to compromi...
Quantenna Communications Quantenna Wi-Fi chipset security vulnerabilities
Quantenna Communications Quantenna Wi-Fi chipset is a WiFi chip from Quantenna Communications, USA. A security vulnerability exists in Quantenna Communications Quantenna Wi-Fi chipset version 8.0.0.28 and earlier, which originates from a command injection in the synctime parameter of the...
CVE-2025-44172
Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function...
CVE-2025-44172: Stack-based Buffer Overflow
Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function...
Tenda AC6 security vulnerabilities
The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the parameter time in the setSmartPowerManagement function failing to properly validate the length of the input data, which can be exploited by an...
CVE-2023-51023
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to arbitrary command execution in the ‘hosttime’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi...
CVE-2023-45483
Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the time parameter in the function compareparentcontroltime...
CVE-2023-33670
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub4a79ec function...
CVE-2023-24345
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus...
CVE-2023-24138
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...
CVE-2023-33675
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the getparentControllistInfo function...