859 matches found
Tenda AC18 setSchedWifi function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from the parameter schedStartTime/schedEndTime in the setSchedWifi function of file /goform/openSchedWifi, which fails to correctly validate the...
Tenda AC18 fromSetWirelessRepeat function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the wpapskcrypto5g parameter of the fromSetWirelessRepeat function failing to correctly validate the length of the input data, which can be exploited by a...
Tenda AC18 formexeCommand function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...
Tenda AC18 R7WebsSecurityHandler function buffer overflow vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from the password parameter of the R7WebsSecurityHandler function that fails to correctly validate the length of the input data, and can be...
CVE-2024-28547
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...
CVE-2024-28547
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...
CVE-2024-28537
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...
CVE-2024-28537
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...
CVE-2024-28550
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...
CVE-2024-28550
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...
CVE-2024-28550
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function...
CVE-2024-28547
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function...
PT-2024-22455 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue is a stack overflow vulnerability located in the firewallEn parameter of the formSetFirewallCfg function. This vulnerability can be exploited, potentially allowing unauthorized access or...
Tenda AC18 Security Vulnerability
Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack overflow vulnerability in the filePath parameter of the formExpandDlnaFile function...
CVE-2024-28550
The CVE-2024-28550 entry concerns Tenda AC18 router firmware V15.03.05.05, reporting a stack overflow in the filePath parameter of the formExpandDlnaFile function. Public references confirm the affected device and parameter, with a CVSSv3.1 base score of 4.3 (Network, Low privileges, no user inte...
CVE-2024-28537
Tenda AC18 (version 15.03.05.05) has a stack overflow in the page parameter of fromNatStaticSetting, exploitable via the /goform/NatStaticSetting endpoint. Affected component: fromNatStaticSetting function (likely input handling of the page parameter). Impact per sources: confidentiality, integri...
CVE-2024-28537
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...
CVE-2024-28547
CVE-2024-28547 affects Tenda AC18, vulnerable in the firewallEn parameter of the formSetFirewallCfg function. A stack overflow is reported, potentially enabling arbitrary control. Affected version: V15.03.05.05. Impact: high availability impact (CVE metrics). Some sources note the issue can be ex...