CVE-2021-38772

CVE-2021-38772 affects the Tenda AC10-1200 router (firmware around v15.03.06.23_EN). The vulnerability is a buffer overflow in the fromSetIpMacBind function triggered by the list parameter, leading to memory boundary violations that can crash the program. References consistently describe a memory...

CVE-2021-38278

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function...

CVE-2021-38278

CVE-2021-38278 affects Tenda AC10-1200 devices (v15.03.06.23_EN) where a buffer overflow can be triggered in the saveParentControlInfo function via the urls parameter. The vulnerability is caused by improper validation of data boundaries in memory operations, potentially enabling buffer overflow....

CVE-2021-38278: Out-of-bounds Write

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function...

PT-2022-17736

Name of the Vulnerable Software and Affected Versions Tenda AC10-1200 version 15.03.06.23 EN Description A buffer overflow was discovered in the setSmartPowerManagement function. This issue may allow for exploitation, potentially leading to unauthorized access or control. Recommendations For Tend...

PT-2022-10710

Name of the Vulnerable Software and Affected Versions Tenda AC10-1200 version 15.03.06.23 EN Description A buffer overflow issue was discovered via the urls parameter in the saveParentControlInfo function. This issue can be exploited, potentially leading to unintended consequences. Recommendation...

PT-2022-10771

Name of the Vulnerable Software and Affected Versions Tenda AC10-1200 version 15.03.06.23 EN Description A buffer overflow issue was discovered via the list parameter in the fromSetIpMacBind function. This issue affects the specified version of the Tenda AC10-1200 router. Recommendations For Tend...

Tenda AC10 缓冲区错误漏洞

Tenda AC10-1200 is a wireless router from Tenda China.A buffer error vulnerability exists in the Tenda AC10-1200, which stems from a failure to properly validate data boundaries when performing operations on memory in the setSmartPowerManagement function. An attacker could exploit this...

CVE-2022-26243: Buffer Copy without Checking Size of Input

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow in the setSmartPowerManagement function...

CVE-2021-38772: Buffer Copy without Checking Size of Input

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function...

The vulnerability of the formsetUsbUnload function in the microprogramming software for Tenda AC7, Tenda AC9, and Tenda AC10 allows a hacker to execute arbitrary operating system commands.

The vulnerability of the formsetUsbUnload function in the microprogramming software for Tenda AC7, Tenda AC9, and Tenda AC10 exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...

Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request...

VulnCheck KEV: CVE-2018-14558

Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request...

Buffer overflow

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A buffer overflow vulnerability exists in the router's web server httpd. When processing the pa...

CVE-2018-14557

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A buffer overflow vulnerability exists in the router's web server httpd. When processing the pa...

CVE-2018-14559

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A buffer overflow vulnerability exists in the router's web server httpd. When processing the li...

CVE-2018-14559

CVE-2018-14559 describes a buffer overflow in Tenda devices (AC7 firmware V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN) caused by writing POST list parameters with sprintf to a stack variable in the httpd web server, which can overwrite a return address. Primary impact is high...

CVE-2018-14557: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A buffer overflow vulnerability exists in the router's web server httpd. When processing the pa...

PT-2019-9037

Name of the Vulnerable Software and Affected Versions Tenda AC7 versions through V15.03.06.44 CNAC7 Tenda AC9 versions through V15.03.05.196318 CNAC9 Tenda AC10 versions through V15.03.06.23 CNAC10 Description A buffer overflow issue exists in the router's web server httpd due to improper handlin...

CVE-2018-14559: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A buffer overflow vulnerability exists in the router's web server httpd. When processing the li...