317 matches found
CVE-2023-40799
Tenda AC23 Vv16.03.07.45cn is vulnerable to Buffer Overflow via sub450A4C function...
CVE-2023-40800
The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40802
The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40800
The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40799
Tenda AC23 Vv16.03.07.45cn is vulnerable to Buffer Overflow via sub450A4C function...
CVE-2023-40801
The sub451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40801
The sub451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40800
The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40802
The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...
Stack overflow
The sub451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
Buffer overflow
Tenda AC23 Vv16.03.07.45cn is vulnerable to Buffer Overflow via sub450A4C function...
Stack overflow
The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
Heap overflow
The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...
PT-2023-27641 · Tenda · Tenda Ac23
Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The issue arises from the sub 4781A4 function not validating user-entered parameters, leading to a post-authentication stack overflow. This occurs after a user has successfully authenticated,...
CVE-2023-40797
CVE-2023-40797 affects Tenda AC23 v16.03.07.45_cn; the sub_4781A4 function fails to validate user-supplied parameters, causing a post-authentication stack overflow. Documented as a high-severity issue (NVD CVSS 8.8) with network access and low privileges required, no explicit exploit or fix versi...
CVE-2023-40802
The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40799
Tenda AC23 Vv16.03.07.45cn is vulnerable to Buffer Overflow via sub450A4C function...
CVE-2023-40801
The sub451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
CVE-2023-40798
CVE-2023-40798 affects the Tenda AC23 (v16.03.07.45_cn). The vulnerability arises because the functions formSetIPv6status and formGetWanParameter do not authenticate user input parameters, leading to a post-authentication stack overflow. Documented impacts are a stack overflow vulnerability; expl...
CVE-2023-40801
The CVE-2023-40801 entry maps to a stack overflow in Tenda AC23 v16.03.07.45_cn caused by the sub_451784 function not validating user-entered input. Root cause: improper validation leading to stack overflow. Impact per CNVD: attacker could execute arbitrary code or cause denial of service. Remedi...