Tenda AC10 formSetPPTPUserList Buffer Overflow Vulnerability

Tenda AC10 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the formSetPPTPUserList handler failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary co...

CVE-2025-4896

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has...

CVE-2025-4896

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has...

CVE-2025-4896 Tenda AC10 UserCongratulationsExec buffer overflow

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has...

CVE-2025-4896 Tenda AC10 UserCongratulationsExec buffer overflow

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has...

CVE-2025-4896

The CVE-2025-4896 entry concerns Tenda AC10 firmware 16.03.10.13. Affects an unknown function under /goform/UserCongratulationsExec where manipulation of the getuid argument causes a buffer overflow. The issue can be exploited remotely and publicly disclosed exploits exist. Practical impact descr...

PT-2025-21864 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A critical issue affects an unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the getuid argument leads to a buffer overflow. This issue can be exploited remotel...

CVE-2025-45779

Tenda AC10 V1.0reV15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter...

CVE-2025-44175

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function...

CVE-2025-44175

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function...

CVE-2025-44175

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function...

CVE-2025-45779

Tenda AC10 V1.0reV15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter...

CVE-2025-45779

Tenda AC10 V1.0reV15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter...

CVE-2025-45779

Tenda AC10 V1.0reV15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter...

CVE-2025-44175

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function...

CVE-2025-44175

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function...

Tenda AC10 安全漏洞

The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10, which stems from the GetParentControlInfo function failing to properly validate the length and size of the input data, no details of the vulnerability are available at thi...

CVE-2025-45779

Tenda AC10 V1.0reV15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter...

PT-2025-20727 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V15.03.06.46 Description: The issue is related to a Buffer Overflow in the formSetPPTPUserList handler. This occurs via the list POST parameter. Recommendations: For Tenda AC10 version V15.03.06.46, as a temporary workaroun...

CVE-2025-44175

CVE-2025-44175 affects the Tenda AC10 router, specifically v4 with version V16.03.10.13, where the GetParentControlInfo function is vulnerable to a buffer overflow due to inadequate validation of input length/size. The CVSS score is 5.4 (Network, Low privileges, No user interaction, Confidentiali...