PT-2023-14806 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version 22.03.01.21 Description: The issue is related to an unauthorized buffer overflow, which can lead to the web service failing to restart or potentially execute arbitrary code. Recommendations: For Tenda AX12 version...

Tenda AX12 安全漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. A security vulnerability exists in Tenda AX12 version v22.03.01.21, which stems from the presence of an unauthorized buffer overflow vulnerability that could result in a web service failing to restart or even execute...

PT-2022-27708 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version 22.03.01.21 CN Description: A stack overflow issue was discovered via the ssid parameter at the "/goform/fast setting wifi set" API endpoint. Recommendations: For Tenda AX12 version 22.03.01.21 CN, avoid using the ssid...

PT-2022-27710 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the "/goform/SysToolRestoreSet" API endpoint. This allows an attacker to perform unauthorized actions on the...

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

CVE-2022-25556

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub42E328. This vulnerability allows attackers to cause a Denial of Service DoS via the list parameter...