Lucene search
+L

629 matches found

CNVD
CNVD
added 2025/11/24 12:00 a.m.36 views

Tenda AC21 SetSysTimeCfg File Stack Buffer Overflow Vulnerability

Tenda AC21 is a dual-band Gigabit wireless router launched by Tenda Technology, designed for home high-speed Internet needs, supporting 802.11acwave2 technology, dual-band concurrent rate up to 2033Mbps, of which the 5GHz band rate up to 1733Mbps, to meet the high-bandwidth applications, such as ...

9.8CVSS8.4AI score0.03881EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/20 3:30 p.m.14 views

EUVD-2025-198252

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9CVSS6.8AI score0.03881EPSS
SaveExploits1References8
NVD
NVD
added 2025/11/20 3:17 p.m.12 views

CVE-2025-13446

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9.8CVSS0.03881EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/11/20 2:32 a.m.25 views

CVE-2025-13446 Tenda AC21 SetSysTimeCfg stack-based overflow

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9CVSS0.03881EPSS
SaveExploits1References7
CVE
CVE
added 2025/11/20 2:32 a.m.24 views

CVE-2025-13446

CVE-2025-13446 affects the Tenda AC21 router. The vulnerability exists in the /goform/SetSysTimeCfg handler, where improper validation of the timeZone/time input leads to a stack-based buffer overflow. This can be exploited remotely without user interaction, enabling arbitrary code execution or a...

9.8CVSS8.8AI score0.03881EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/20 12:00 a.m.26 views

PT-2025-47551

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9CVSS7.3AI score0.03881EPSS
SaveExploits1References7
NVD
NVD
added 2025/11/01 7:15 p.m.11 views

CVE-2025-12603

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS0.00279EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/01 6:56 p.m.29 views

CVE-2025-12603

CVE-2025-12603 concerns Azure Access Technology BLU-IC2 and BLU-IC4 devices where the /etc/timezone file can be written arbitrarily. Multiple sources (NVD/CNVD/CVELIST) concur that this affects BLU-IC2 and BLU-IC4 up to version 1.19.5. PT Security specifies that the vulnerability allows arbitrary...

9.8CVSS6.6AI score0.00279EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/01 12:25 a.m.16 views

CVE-2025-63458

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.6AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/31 7:15 p.m.11 views

CVE-2025-63458

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS0.0037EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/31 12:00 a.m.22 views

CVE-2025-63458

Affected software: Tenda AX-1803 v1.0.0.1. Vulnerability: stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. Impact: Denial of Service (DoS) from a crafted request. Root cause: input length validation issue causing stack overflow. Exploitation: not detailed in t...

7.5CVSS7.2AI score0.0037EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2025/10/07 10:15 a.m.15 views

CVE-2025-11385

A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...

9CVSS0.00739EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/07 10:15 a.m.9 views

CVE-2025-11385

A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...

8.7CVSS6.2AI score0.00739EPSS
SaveExploits1References6
CVE
CVE
added 2025/10/07 9:32 a.m.26 views

CVE-2025-11385

The CVE-2025-11385 entry describes a buffer overflow in Tenda AC20 routers (up to version 16.03.08.12) caused by manipulating the timeZone argument in the sscanf usage within /goform/fast_setting_wifi_set. The underlying issue is a sscanf parameter handling overflow, allowing remote exploitation ...

9CVSS8.7AI score0.00739EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2017-16183

Malware in sbrugna...

5.3CVSS7.4AI score0.00779EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2008-0064

Malware in sbrugna...

6.9CVSS6.4AI score0.00396EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/10/07 12:00 a.m.11 views

Tenda AC20 安全漏洞

Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the incorrect operation of the sscanf function parameter timeZone in the file /goform/fastsettingwifiset, for which no detailed vulnerability details are available at this ti...

9CVSS7.5AI score0.00739EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2021-33039

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00644EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2025-9218

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.0034EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.25 views

EUVD-2025-28600

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00169EPSS
SaveExploits0References2
Rows per page
Query Builder