CVE-2022-43259

Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function...

CVE-2022-43259

CVE-2022-43259 affects Tenda AC15 (v15.03.05.18). The vulnerability is a stack overflow in the timeZone parameter of the form_fast_setting_wifi_set function, caused by lack of input length validation. Impact per sources is denial of service and potential partial impact on availability. Public exp...

Tenda AC15 缓冲区错误漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function that lacks length validation for input data. An attacker could exploit the vulnerabili...

PT-2022-5279 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1200, 1202, 1203 version 1.08 Description: The issue is related to a command injection vulnerability via the system time timezone parameter at the SetNTPServerSettings function. This vulnerability may allow a remote...

CVE-2022-37819

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...

CVE-2022-37819

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...

CVE-2022-37819

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...

Stack overflow

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...

CVE-2022-37819

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...

CVE-2022-37819

CVE-2022-37819 affects Tenda AX1803 v1.0.0.1. A stack overflow is triggered in the fromSetSysTime() function via the timezone parameter, due to improper boundary checking. Reported impacts include potential arbitrary code execution or denial of service; exploitability is described as local with l...

PT-2022-24097 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A stack overflow issue was discovered in the Tenda AX1803, specifically via the timezone parameter in the fromSetSysTime function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider restricti...

Tenda AX1806 Stack Overflow Vulnerability (CNVD-2022-38065)

Tenda AX1806 is a WiFi6 wireless router from Tenda China. A security vulnerability exists in the Tenda AX1806 version 1.0.0.1, which originates from a stack overflow discovered via the timeZone parameter in the formfastsettingwifiset function. An attacker can cause a denial of service DoS by...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

Stack overflow

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28972

CVE-2022-28972 affects Tenda AX1806 v1.0.0.1. A stack overflow is triggered via the timeZone parameter in the function form_fast_setting_wifi_set, leading to a Denial of Service (DoS). CVSS:3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user interaction). Other sources also...

Multiple ARRIS Product Command Injection Vulnerabilities (CNVD-2022-68534)

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS USA. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the TimeZone parameter in the ntp function failing to properly filter the construct command special characters, commands,...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...