264 matches found
CVE-2023-33669
CVE-2023-33669 affects the Tenda AC8 router firmware (versions prior to V4.0-V16.03.34.06). The vulnerability is a stack overflow in the timeZone handling path (sub_44db3c), which can lead to arbitrary code execution or a denial of service. Public references describe the issue consistently, with ...
CVE-2023-33669
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...
Tenda AC8 Buffer Error Vulnerability
Tenda AC8 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC8 timeZone parameter, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause a denial of service...
CVE-2023-28343
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/settimezone timezone parameter, because of settimezone in models/managementmodel.php...
SUSE CVE-2014-9220
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modifyschedule OMP command...
CVE-2022-45699
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...
CVE-2022-45699: Improper Neutralization of Special Elements used in an OS Command
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...
APsystems Energy Communication Unit: Operating System Command Injection Vulnerability
The APsystems Energy Communication Unit APsystems ECU-R is an energy communication unit from APsystems USA. An operating system command injection vulnerability exists in APSystems ECU-R version 5203. An attacker could exploit this vulnerability to execute arbitrary commands as root using the...
CVE-2022-45699
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...
CVE-2022-45655
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...
Buffer overflow
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...
CVE-2022-45655
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...
CVE-2022-45655
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...
PT-2022-27597 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the timeZone parameter in the form fast setting wifi set function. This issue may be exploited to cause undefined behavior, potentially leading to code...
CVE-2022-45655: Buffer Copy without Checking Size of Input
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...
CVE-2022-45655
CVE-2022-45655 affects Tenda AC6V1.0 (firmware 15.03.05.19). The buffer overflow arises from lack of length validation in the timeZone parameter of the form_fast_setting_wifi_set function, leading to potential denial of service. Exploitation is described as network-based with no user interaction ...
CVE-2022-43102
Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
CVE-2022-43102
Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...