Tenda A15 UploadCfg() Code Execution

The vulnerability of the UploadCfg function in the Tenda A15 router’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the File parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sendi...

Tenda A15 security vulnerabilities

The Tenda A15 is a WiFi extender produced by the Chinese company Tenda. Version 15.13.07.13 of the Tenda A15 contains a security vulnerability. This vulnerability stems from improper handling of the File parameter in the UploadCfg function located at /file/cgi-bin/UploadCfg. It may lead to a...

Tenda W30E UploadCfg DoS

The vulnerability of the UploadCfg function in the Tenda W30E wireless access point’s microprogramming software is related to buffer overflows during the processing of parameter v17. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted PO...

CVE-2025-57085

Tenda W30E V16.01.0.19 5037 was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...