PT-2022-26298 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 15.03.06.23 Description: The issue is related to a stack overflow vulnerability. This vulnerability can be exploited via the "/goform/saveParentControlInfo" API endpoint. Recommendations: For Tenda AC10 version 15.03.06.23,...

PT-2022-26292 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 15.03.06.23 Description: The issue is related to a stack overflow vulnerability. This vulnerability can be exploited via the API endpoint "/goform/formSetSpeedWan". Recommendations: For Tenda AC10 version 15.03.06.23, as a...

CVE-2022-42169

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter...

CVE-2022-42164

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState...

Tenda AC10 缓冲区错误漏洞

The Tenda AC10 is a wireless router from China-based Tenda. A security vulnerability exists in Tenda AC10 firmware version V15.03.06.23, which originates from a stack buffer overflow in its /goform/formSetFirewallCfg component...

CVE-2022-42165

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName...

CVE-2022-42163

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting...

CVE-2022-42164

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState...

CVE-2022-42167

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg...

CVE-2022-42171

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo...

CVE-2022-42168

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind...

CVE-2022-42166

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan...

CVE-2022-42163

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting...

CVE-2022-42170

CVE-2022-42170 describes a stack overflow in the Tenda AC10 firmware version 15.03.06.23, triggered via the HTTP API endpoint /goform/formWifiWpsStart. The vulnerability affects the router’s web/API handling and has a highly critical impact profile (CVSS v3.1: 9.8, network attack vector, no authe...

CVE-2022-42171

CVE-2022-42171 affects Tenda AC10 firmware version V15.03.06.23, with a stack overflow in the /goform/saveParentControlInfo endpoint. The vulnerability is described as a stack overflow in this component, with CVSS v3.1 base score 9.8 (CRITICAL) and impact to confidentiality, integrity, and availa...

CVE-2022-42163

CVE-2022-42163 describes a stack overflow in Tenda AC10 firmware version 15.03.06.23, exploitable via the /goform/fromNatStaticSetting endpoint. The issue is reported across multiple sources with a CVSS v3.1 base score of 9.8 (CRITICAL), network vector, no user interaction required, and high impa...

CVE-2022-42164

CVE-2022-42164 affects Tenda AC10, specifically version 15.03.06.23. The vulnerability is a stack overflow in the formSetClientState API (/goform/formSetClientState) caused by incorrect boundary checking. Impact is described consistently as potential arbitrary code execution or denial of service,...

CVE-2022-42166

CVE-2022-42166 affects Tenda AC10 firmware v15.03.06.23 with a reported stack overflow in the endpoint /goform/formSetSpeedWan . CVSS v3.1 base score 9.8 (CRITICAL); attacker requires network access, with no authentication or user interaction, and impact to confidentiality, integrity, and availab...

CVE-2022-42167

CVE-2022-42167 affects Tenda AC10 firmware v15.03.06.23, with a stack overflow vulnerability in the /goform/formSetFirewallCfg endpoint. The NVD/Red Hat/CNNVD and related feeds confirm the flaw originates from this API component, allowing arbitrary memory overwrite that can compromise confidentia...

CVE-2022-42168

The CVE-2022-42168 entry concerns the Tenda AC10 router with firmware version V15.03.06.23. The vulnerability is a stack overflow in the /goform/fromSetIpMacBind endpoint. The CVSS v3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no user interaction, and no privileges required; impac...