CVE-2023-40799

Tenda AC23 Vv16.03.07.45cn is vulnerable to Buffer Overflow via sub450A4C function...

PT-2023-27645 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The issue arises from the sub 451784 function not validating user-entered parameters, leading to a stack overflow. Recommendations: For Tenda AC23 version 16.03.07.45 cn, as a temporary workaroun...

CVE-2023-40802

The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...

CVE-2023-40801

The sub451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

CVE-2023-40798

CVE-2023-40798 affects the Tenda AC23 (v16.03.07.45_cn). The vulnerability arises because the functions formSetIPv6status and formGetWanParameter do not authenticate user input parameters, leading to a post-authentication stack overflow. Documented impacts are a stack overflow vulnerability; expl...

CVE-2023-40802

The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...

CVE-2023-40802

The CVE-2023-40802 entry affects the Tenda AC23 router (v16.03.07.45_cn). The root cause is that the function get_parentControl_list_Info does not validate user-supplied parameters, leading to a post-authentication heap overflow vulnerability. Documented impact indicates a high availability impac...

CVE-2023-40799

Tenda AC23 Vv16.03.07.45cn is vulnerable to Buffer Overflow via sub450A4C function...

PT-2023-27643 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version Vv16.03.07.45 cn Description: The issue is related to a Buffer Overflow vulnerability via the sub 450A4C function. Recommendations: For Tenda AC23 version Vv16.03.07.45 cn, as a temporary workaround, consider disabling the...

PT-2023-27644 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The compare parentcontrol time function does not authenticate user input parameters, resulting in a post-authentication stack overflow issue. This allows for potential exploitation after a user h...

CVE-2023-40800

The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

CVE-2023-40797

In Tenda AC23 v16.03.07.45cn, the sub4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability...

CVE-2023-40799

The CVE-2023-40799 entry concerns the Tenda AC23 router (version Vv16.03.07.45_cn). Root cause: a buffer overflow in the sub_450A4C function. Impact per sources indicates potential for arbitrary code execution or denial of service, with high confidentiality, integrity, and availability impact (CV...

CVE-2023-40800

The CVE-2023-40800 issue affects Tenda AC23 (v16.03.07.45_cn). Affected component: compare_parentcontrol_time function. Root cause: input parameters are not authenticated/validated, leading to a post-authentication stack overflow. Impact per sources: arbitrary code execution or system crash after...

Tenda AC23 输入验证错误漏洞

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. The Tenda AC23 suffers from a stack buffer overflow vulnerability, which stems from the...

PT-2023-27641 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The issue arises from the sub 4781A4 function not validating user-entered parameters, leading to a post-authentication stack overflow. This occurs after a user has successfully authenticated,...

PT-2023-27642 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability. Recommendations: For Tenda AC23...

CVE-2023-40800

The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

Tenda AC23 Command Injection Vulnerability

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a command injection vulnerability, which stems from the parameter v2 of the file /bin/ate failing to correctly filter construct command special characters, commands, etc. An attacker can exploit this...

CVE-2023-2649

A vulnerability was found in Tenda AC23 16.03.07.45cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The explo...