PT-2026-3840

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution...

PT-2026-3839

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution...

CVE-2023-27042

Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg...

CVE-2023-51812

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution RCE vulnerability via the list parameter at /goform/SetNetControlList...

CVE-2023-51812

The CVE-2023-51812 vulnerability affects Tenda AX3 v16.03.12.11, exploitable via the list parameter in /goform/SetNetControlList. The root cause is failure to properly filter elements in the constructed code segment, enabling remote code execution with network access and no user interaction. CVSS...

Command injection

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49409

The CVE-2023-49409 entry affects Tenda AX3 firmware V16.03.12.11. The vulnerability is a Command Execution flaw exposed through the /goform/telnet handler, attributed to improper filtering of special characters/commands in the handler. Impact is arbitrary command execution with high-severity pote...

CVE-2023-49409

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

Command injection

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

Stack overflow

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet...

CVE-2023-27239

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet...

CVE-2023-27240

The Tenda AX3 (Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router), specifically version V16.03.12.11 , is vulnerable to a command injection vulnerability. The root cause is the lanip parameter at the /goform/AdvSetLanip API endpoint, which fails to correctly filter special characters and comma...

CVE-2023-27239

CVE-2023-27239 affects the Tenda AX3 router, version 16.03.12.11. The vulnerability is a stack overflow triggered by the shareSpeed parameter in the /goform/WifiGuestSet API, allowing potential remote code execution or denial of service. Multiple connected sources corroborate the affected product...

CVE-2023-24212

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

Stack overflow

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

CVE-2023-24212

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

CVE-2023-24212

CVE-2023-24212 relates to a stack overflow in the Tenda AX3 firmware (16.03.12.11) triggered by the timeType function in the /goform/SetSysTimeCfg endpoint. The vulnerability affects the affected product via a crafted request over the network (CVSS: 3.1, AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H...