CVE-2023-40902

CVE-2023-40902 affects Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn. The vulnerability is a stack overflow in the /goform/SetIpMacBind API triggered by the parameter list and bindnum, as described in multiple advisories. Affected component: the web API endpoint at /goform/SetIpMacBind; underlying ...

CVE-2023-40901

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg...

CVE-2023-40901

CVE-2023-40901 affects Tenda AC10 v4 (US_AC10V4.0si_V16.03.10.13_cn). A stack overflow is triggered by the macFilterType and deviceList parameters in the /goform/setMacFilterCfg endpoint. The root cause is a vulnerability in processing these parameters that may allow stack corruption. Reported im...

PT-2023-27696 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the macFilterType and deviceList parameters at the "/goform/setMacFilterCfg" API endpoint. This issue can be exploited, potentially...

CVE-2023-38937

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function...

CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

Design/Logic Flaw

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

Tenda AC10 Buffer Error Vulnerability

Tenda AC10 is a wireless router from Tenda, China. Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 A security vulnerability exists in versions V15.03.06.42multi and AC10 v4.0 V16.03.10.13, which...

CVE-2023-38931

CVE-2023-38931 is a stack overflow in Tenda devices’ setaccount function when handling the list parameter, affecting multiple models (AC10, AC1206, AC8, AC6, AC7, F1203, AC5, FH1203, etc.). The root cause is improper handling/validation of the list parameter, enabling potential remote code execut...

Tenda AC10 Buffer Error Vulnerability

Tenda AC10 is a wireless router from Tenda, China. Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2 .0.1.6, AC9 V3.0 A security vulnerability exists in versions V15.03.06.42multi and FH1205 V2.0.0.7775 due to a stack...

CVE-2023-38936

CVE-2023-38936 concerns multiple Tenda devices (AC10, AC1206, AC6, AC7, AC5, FH1203, AC9, FH1205) where a stack overflow occurs in the function to set WAN speed (formSetSpeedWan) via the speed_dir parameter. Affected firmware versions include V15.03.06.xx ranges listed in the sources. The core is...

Tenda AC10 Buffer Error Vulnerability

Tenda AC10 is a wireless router from Tenda, China. Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1 .6, AC5 V1.0 V15.03 .06.28, AC10 v4.0 V16.03.10.13, and FH1203 V2.0.1.6, a security vulnerability exists in the lis...

The vulnerability of the formWriteFacMac function in the Tenda AC10 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda AC10 router software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the mac parameter...

The vulnerability of the fromSetWirelessRepeat function in the microprogramming software for Tenda AC1206 and Tenda AC10 allows a hacker to execute arbitrary code.

The vulnerability of the fromSetWirelessRepeat function in the microprogramming software for Tenda AC1206 and Tenda AC10 lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `saveParentControlInfo` function in the microprogramming software for Tenda AC1206 and Tenda AC10 allows a hacker to execute arbitrary code.

The vulnerability of the saveParentControlInfo function in Tenda AC1206 and Tenda AC10 router microprogramming systems lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-37717

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...

CVE-2023-37717

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...

CVE-2023-37716

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting...

CVE-2023-37717

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient...