CVE-2025-4897

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely...

CVE-2025-4897 Tenda A15 HTTP POST Request multimodalAdd buffer overflow

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely...

CVE-2025-4897 Tenda A15 HTTP POST Request multimodalAdd buffer overflow

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely...

CVE-2025-4897

CVE-2025-4897 affects Tenda A15 routers (versions 15.13.07.09–15.13.07.13). The issue resides in the HTTP POST Request Handler for the endpoint at /goform/multimodalAdd, where improper handling leads to a buffer overflow. This could allow remote, unauthenticated attackers to execute arbitrary cod...

CVE-2025-4867

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

CVE-2025-4867

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

CVE-2025-4867 Tenda A15 ArpNerworkSet formArpNerworkSet denial of service

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

CVE-2025-4867 Tenda A15 ArpNerworkSet formArpNerworkSet denial of service

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

CVE-2025-4867

The CVE-2025-4867 entry concerns Tenda A15 (firmware version 15.13.07.13). The vulnerability lies in the function formArpNerworkSet within the file /goform/ArpNerworkSet, where manipulation leads to a denial of service. Exploitation can be remote and the exploit has been disclosed publicly. Multi...

Tenda A15 安全漏洞

The Tenda A15 is a dual-band gigabit wireless router. A buffer overflow vulnerability exists in the Tenda A15. The vulnerability stems from improper handling of the /goform/multimodalAdd file by the HTTP POST request processor component and can be exploited by an attacker to remotely execute...

PT-2025-21865 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 versions 15.13.07.09 through 15.13.07.13 Description: A critical issue affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler, leading to buffer overflow. The manipulation can be initiat...

Tenda A15 安全漏洞

Tenda A15 is a WiFi extender from Tenda China. Tenda A15 suffers from a denial of service vulnerability that originates from an incorrect operation of the function formArpNerworkSet in the file /goform/ArpNerworkSet, which can be exploited by an attacker to cause a denial of service...

PT-2025-21838 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A vulnerability was found in the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...

CVE-2024-0533

A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument devName leads to stack-based buffer overflow. The...

CVE-2024-0531

A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the component Web-based Management Interface. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible t...

CVE-2024-0532

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function setrepeat5 of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapskcrypto24g/wpapskcrypto5g leads to...

CVE-2024-0534

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch...

The vulnerability of the formSetDevNetName() function (implemented in the goform/SetDevNetNam library) in the Tenda A15 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formSetDevNetName function implemented in the goform/SetDevNetNam microprogramming environment for Tenda A15 routers is related to the issue where the operation’s output goes beyond the buffer boundaries in memory when processing the mac parameter. Exploiting this...

The vulnerability in the web interface of the wireless access point Tenda A15’s microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface for managing microprogramming software in the Tenda A15 wireless access point is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface of the wireless access point Tenda A15’s microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface for managing wireless access points of the Tenda A15 micro-programming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the deviceList argument...