Lucene search
+L

791 matches found

OSV
OSV
added 2025/04/03 3:15 p.m.9 views

CVE-2025-3161

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

8.7CVSS6.5AI score0.00901EPSS
SaveExploits0References7
NVD
NVD
added 2025/04/03 3:15 p.m.16 views

CVE-2025-3161

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

9CVSS0.00901EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/04/03 2:31 p.m.35 views

CVE-2025-3161 Tenda AC10 ShutdownSetAdd stack-based overflow

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

9CVSS0.00901EPSS
SaveExploits0References7
CVE
CVE
added 2025/04/03 2:31 p.m.91 views

CVE-2025-3161

The CVE-2025-3161 issue affects Tenda AC10 (firmware 16.03.10.13) in the ShutdownSetAdd routine (/goform/ShutdownSetAdd). The vulnerability arises from improper handling of an argument list, leading to a stack-based buffer overflow. Impact is described as remote, with the potential to execute arb...

9CVSS7.3AI score0.00901EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/03 2:31 p.m.17 views

CVE-2025-3161 Tenda AC10 ShutdownSetAdd stack-based overflow

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

9CVSS7.3AI score0.00901EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.9 views

Tenda AC10 安全漏洞

The Tenda AC10 is a home wireless router that provides wireless network connectivity and management. A stack overflow vulnerability exists in the Tenda AC10. The vulnerability stems from the improper handling of the list parameter in the ShutdownSetAdd function in the /goform/ShutdownSetAdd file...

9CVSS7.6AI score0.00901EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/03/16 12:00 a.m.9 views

PT-2025-20729 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version V16.03.10.13 Description: The issue concerns a Buffer Overflow vulnerability in the GetParentControlInfo function. This vulnerability can be exploited, potentially leading to unauthorized access or control. No informatio...

5.5CVSS6.2AI score0.00266EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/03/07 12:00 a.m.29 views

Tenda AC10 Command Injection Vulnerability (CNVD-2025-09219)

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a command injection vulnerability that stems from a command injection vulnerability contained in the formexeCommand function, no details of the vulnerability are provided at this time...

9.8CVSS7.2AI score0.01337EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/07 12:00 a.m.48 views

Tenda AC10 Buffer Overflow Vulnerability (CNVD-2025-09218)

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the ssid parameter of formfastsettingwifiset contains a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/26 12:00 a.m.19 views

The vulnerability of the get_parentControl_list_Info() function in the Tenda AC10 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the getparentControllistInfo function in the Tenda AC10 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

10CVSS8.6AI score0.01069EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/26 12:00 a.m.26 views

The vulnerability of the setSchedWifi() function in the microprogramming software for Tenda AC10 allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the setSchedWifi function in the Tenda AC10 router’s microprogramming software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failur...

10CVSS8.5AI score0.01127EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/22 12:31 a.m.19 views

CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...

9.8CVSS6.8AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/22 12:31 a.m.15 views

CVE-2025-25675

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmdbuf variable, which is directly used in the doSystemCmd function, causing an arbitrary...

9.8CVSS7.5AI score0.01337EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/20 11:15 p.m.12 views

CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...

9.8CVSS5.8AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/20 11:15 p.m.7 views

CVE-2025-25675

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmdbuf variable, which is directly used in the doSystemCmd function, causing an arbitrary...

9.8CVSS6AI score0.01337EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/20 11:15 p.m.34 views

CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...

9.8CVSS0.00441EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/20 11:15 p.m.37 views

CVE-2025-25675

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmdbuf variable, which is directly used in the doSystemCmd function, causing an arbitrary...

9.8CVSS0.01337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.7 views

CVE-2025-25675

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmdbuf variable, which is directly used in the doSystemCmd function, causing an arbitrary...

9.8AI score0.01337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/20 12:00 a.m.12 views

PT-2025-7567 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 V1.0 V15.03.06.23 Description: The issue is related to a command injection vulnerability located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd...

9.8CVSS7.7AI score0.01337EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.11 views

CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...

9.5AI score0.00441EPSS
SaveExploits0References1
Rows per page
Query Builder