CVE-2020-10986

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page...

CVE-2020-10986

CVE-2020-10986 refers to a CSRF vulnerability in the Tenda AC15 AC1900 router (version 15.03.05.19) where exploitation of the /goform/SysToolReboot endpoint allows remote attackers to cause a reboot and denial of service by hosting a payload on a malicious page. The root cause is cross-site reque...

PT-2020-4297

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description Remote attackers can execute arbitrary system commands due to insufficient neutralization of special elements passed in the URI. This issue occurs at the 'goform/setUsbUnload' endpoint via the...

PT-2020-12472

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description A hard-coded telnet credential in the tenda login binary allows unauthenticated remote attackers to start a telnetd service on the device. Recommendations For Tenda AC15 AC1900 version...

PT-2020-12473

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description The issue is related to an XSS problem that allows remote attackers to execute malicious payloads. This is achieved via the WifiName POST parameter in the "/goform/WifiBasicSet" endpoint...

CVE-2020-10987

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-10988: Use of Hard-coded Credentials

A hard-coded telnet credential in the tendalogin binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device...

CVE-2020-10986: Cross-Site Request Forgery (CSRF)

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page...

CVE-2020-10987: Improper Neutralization of Special Elements used in an OS Command

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter...

CVE-2020-10989: Improper Neutralization of Input During Web Page Generation

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter...

PT-2020-12471

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description A CSRF issue allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page, specifically targeting the "goform/SysToolReboot"...

Denial of Service Vulnerability in TP-Link AC1900 Routers

The TP-Link AC1900 is a mini wireless router from China P&L TP-Link. The TP-Link AC1900 suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

PT-2017-3654

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC66U versions prior to 3.0.0.4.384 10007 ASUS RT-AC68U versions prior to 3.0.0.4.384 10007 ASUS RT-AC86U versions prior to 3.0.0.4.384 10007 ASUS RT-AC88U versions prior to 3.0.0.4.384 10007 ASUS RT-AC1900 versions prior to 3.0.0.4.3...

ASUS TM-AC1900 栈缓冲区溢出漏洞

No description provided by source...

CVE-2015-6949

Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values...

Stack overflow

Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values...

CVE-2015-6949

The CVE-2015-6949 issue affects the ASUS TM-AC1900 router. A stack-based buffer overflow in the HTTP header parsing routine allows remote attackers to execute arbitrary code by sending crafted HTTP header values, potentially yielding root-privileged code execution. Public references (e.g., NVD en...

CVE-2015-6949: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values...

PT-2015-7423

Name of the Vulnerable Software and Affected Versions ASUS TM-AC1900 router affected versions not specified Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code via crafted HTTP header values. This can potentially lead to remote code...

(0Day) ASUS TM-AC1900 httpd Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the ASUS TM-1900. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP header parsing routine. The issue lies in the failure to check the size of...