791 matches found
CVE-2022-42167
CVE-2022-42167 affects Tenda AC10 firmware v15.03.06.23, with a stack overflow vulnerability in the /goform/formSetFirewallCfg endpoint. The NVD/Red Hat/CNNVD and related feeds confirm the flaw originates from this API component, allowing arbitrary memory overwrite that can compromise confidentia...
CVE-2022-42167
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg...
CVE-2022-42163
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting...
CVE-2022-42167
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg...
CVE-2022-42164
CVE-2022-42164 affects Tenda AC10, specifically version 15.03.06.23. The vulnerability is a stack overflow in the formSetClientState API (/goform/formSetClientState) caused by incorrect boundary checking. Impact is described consistently as potential arbitrary code execution or denial of service,...
CVE-2022-42171
CVE-2022-42171 affects Tenda AC10 firmware version V15.03.06.23, with a stack overflow in the /goform/saveParentControlInfo endpoint. The vulnerability is described as a stack overflow in this component, with CVSS v3.1 base score 9.8 (CRITICAL) and impact to confidentiality, integrity, and availa...
PT-2022-26298 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 15.03.06.23 Description: The issue is related to a stack overflow vulnerability. This vulnerability can be exploited via the "/goform/saveParentControlInfo" API endpoint. Recommendations: For Tenda AC10 version 15.03.06.23,...
CVE-2022-42163
CVE-2022-42163 describes a stack overflow in Tenda AC10 firmware version 15.03.06.23, exploitable via the /goform/fromNatStaticSetting endpoint. The issue is reported across multiple sources with a CVSS v3.1 base score of 9.8 (CRITICAL), network vector, no user interaction required, and high impa...
CVE-2022-42168
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind...
Tenda AC10 缓冲区错误漏洞
The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking in the formSetClientState function. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the system, ...
Tenda AC10 缓冲区错误漏洞
The Tenda AC10 is a wireless router from China-based Tenda. A security vulnerability exists in Tenda AC10 firmware version V15.03.06.23, which originates from a stack buffer overflow in its /goform/formWifiWpsStart component...
Tenda AC10 缓冲区错误漏洞
The Tenda AC10 is a wireless router from China-based Tenda. A security vulnerability exists in Tenda AC10 firmware version V15.03.06.23, which originates from a stack buffer overflow in its /goform/fromSetIpMacBind component...
CVE-2022-42170
CVE-2022-42170 describes a stack overflow in the Tenda AC10 firmware version 15.03.06.23, triggered via the HTTP API endpoint /goform/formWifiWpsStart. The vulnerability affects the router’s web/API handling and has a highly critical impact profile (CVSS v3.1: 9.8, network attack vector, no authe...
Tenda AC10 缓冲区错误漏洞
The Tenda AC10 is a wireless router. A stack overflow vulnerability exists in the Tenda AC10 formSetDeviceName function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system or cause a denial of service...
CVE-2022-42164
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState...
PT-2022-26292 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 15.03.06.23 Description: The issue is related to a stack overflow vulnerability. This vulnerability can be exploited via the API endpoint "/goform/formSetSpeedWan". Recommendations: For Tenda AC10 version 15.03.06.23, as a...
CVE-2022-42170
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart...
CVE-2022-42168
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind...