PT-2025-34056 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.23 multi Description: The Tenda AC6 router firmware contains a stack overflow vulnerability. This issue is triggered via the deviceName parameter within the saveParentControlInfo function. Recommendations: Update to...

CVE-2023-38935

CVE-2023-38935 affects multiple Tenda models (AC1206, AC8, AC5, AC10, AC9) with versions listed in the initial entry. A stack overflow via the list parameter in the formSetQosBand function is reported across sources; the CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privile...

CVE-2023-38936

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42multi and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the speeddir parameter in the formSetSpeedWan function...

Stack overflow

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapskcrypto parameter in the fromSetWirelessRepeat function...

Stack overflow

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

Tenda AC1206 缓冲区错误漏洞

Tenda AC1206 is a Wireless King Gigabit Router from Tenda, China. A security vulnerability exists in the Tenda AC1206 version V15.03.06.23, which is caused by a buffer overflow in the wpapskcrypto parameter of the fromSetWirelessRepeat method...

CVE-2023-37712

CVE-2023-37712 affects Tenda AC1206 (v15.03.06.23) and Tenda F1202/FH1202 (v1.2.0.20(408)). The issue is a stack overflow in the page parameter of the fromSetIpBind function in the firmware. The vulnerability can lead to remote code execution with high impact on confidentiality, integrity, and av...

CVE-2022-46109

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

Buffer overflow

Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState...

CVE-2022-46109

CVE-2022-46109 affects Tenda AC15 V15.03.06.23, with a buffer overflow vulnerability in the formSetClientState function. Public records cite a CVSS v3.1 base score of 7.5 (HIGH, NETWORK attack vector, no authentication required, user interaction not needed, availability impact). Affected product/...

CVE-2022-42171

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo...

CVE-2022-42169

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter...

CVE-2022-42166

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan...

CVE-2022-42167

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg...

Stack overflow

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan...

Stack overflow

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind...

Stack overflow

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter...

Stack overflow

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo...

CVE-2022-42163

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting...

CVE-2022-42163

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting...