279 matches found
Buffer overflow
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic...
Buffer overflow
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName...
CVE-2022-40067
CVE-2022-40067 affects Tenda AC21 V16.03.08.15, with a buffer overflow in the /bin/httpd component, specifically the formSetVirtualSer function. The NVD entry lists a network-exposed vulnerability with high severity (CVSS 3.1: 7.5) and no required user interaction. Connected sources corroborate t...
CVE-2022-40067
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer...
CVE-2022-40068
The CVE-2022-40068 entry concerns Tenda AC21, specifically version 16.03.08.15, where a buffer overflow exists in the /bin/httpd binary via the formSetQosBand function. The root cause is unbounded input handling in formSetQosBand, enabling a potentially crafted payload to trigger a buffer overflo...
CVE-2022-40068
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand...
CVE-2022-40069
Tenda AC21 is affected by CVE-2022-40069. The vulnerability is a buffer overflow in the fromSetSysTime() function exposed via /bin/httpd on version 16.03.08.15, caused by insufficient input length checking. This can cause the httpd process to restart and potentially process payloads, with CVSS v3...
CVE-2022-40069
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime...
CVE-2022-40070
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg...
CVE-2022-40070
CVE-2022-40070 affects Tenda AC21 V16.03.08.15. The vulnerability is a buffer overflow in the /bin/httpd function formSetFirewallCfg caused by insufficient input length checking, which can cause httpd to restart with a payload. This is documented across multiple sources (CNVD, CVE records, Red Ha...
CVE-2022-40071
CVE-2022-40071 affects Tenda AC21, specifically version 16.03.08.15, where the vulnerability resides in the /bin/httpd endpoint’s formSetDeviceName. The root cause is a lack of length checking in formSetDeviceName, enabling a buffer overflow. Documented impact includes triggering an httpd restart...
CVE-2022-40071
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName...
CVE-2022-40072
CVE-2022-40072 affects Tenda AC21 V16.03.08.15, with a Buffer Overflow in /bin/httpd (setSmartPowerManagement). Root cause: insufficient input length checking in setSmartPowerManagement leading to httpd restart with a payload. Impact per sources: availability impact HIGH; attack vector NETWORK, n...
CVE-2022-40072
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement...
CVE-2022-40073
Affected product: Tenda AC21 router, version 16.03.08.15. Vulnerable component/function: /bin/httpd, saveParentControlInfo. Root cause: missing length checking leading to a buffer overflow. Documented impact: potential httpd restart; CVSSv3 base score 7.5 (HIGH), network attack vector, no user in...
CVE-2022-40073
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo...
CVE-2022-40074
CVE-2022-40074 affects Tenda AC21 firmware version 16.03.08.15; a buffer overflow exists in /bin/httpd via the setSchedWifi function. Based on sources, attack surface is network-level (no user interaction, low complexity) with availability impact (CVE CVSS: 7.5, HIGH). Remediation details in publ...
CVE-2022-40075
CVE-2022-40075 affects Tenda AC21, specifically version 16.03.08.15, where a buffer overflow can be triggered in /bin/httpd via the form_fast_setting_wifi_set endpoint due to insufficient input length checking. This could cause the httpd process to restart (per CNVD/CNVD-derived descriptions) and...
CVE-2022-40075
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...
CVE-2022-40076
The CVE-2022-40076 entry concerns Tenda AC21 V16.03.08.15 with a buffer overflow in /bin/httpd, caused by lack of length checking in the fromSetWifiGusetBasic function. Reported affected component is the httpd process; impact is labeled as HIGH for availability (exploit details not provided in th...