CVE-2023-2649

A vulnerability was found in Tenda AC23 16.03.07.45cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The explo...

Command injection

A vulnerability was found in Tenda AC23 16.03.07.45cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The explo...

CVE-2023-2649

CVE-2023-2649 affects Tenda AC23 with firmware 16.03.07.45_cn, where a flaw in the Service Port 7329 component (/bin/ate) allows manipulation of the v2 argument to trigger remote command injection. Exploitation can occur without user interaction and has been disclosed publicly. Impact is arbitrar...

CVE-2023-2649 Tenda AC23 Service Port 7329 ate command injection

A vulnerability was found in Tenda AC23 16.03.07.45cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The explo...

Tenda AC23 命令注入漏洞

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a command injection vulnerability, which stems from the parameter v2 of the file /bin/ate failing to correctly filter construct command special characters, commands, etc. An attacker can exploit this...

PT-2023-9016 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The issue is related to insufficient argument checking in the Service Port 7329 component of the Tenda AC23 router's firmware, which can lead to command injection. This can be exploited by a remo...

Tenda AC23 Out-of-Bounds Write Vulnerability

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 suffers from an out-of-bounds write vulnerability, which originates from the...

CVE-2023-0782

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2023-0782

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed t...

Design/Logic Flaw

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2023-0782 Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2023-0782 Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2023-0782

Summary of CVE-2023-0782 : Affected product is Tenda AC23, specifically version 16.03.07.45. The vulnerability is in the /bin/httpd binary, within the functions formSetSysToolDDNS and formGetSysToolDDNS. Exploitation leads to an out-of-bounds write and can be conducted remotely. Several connected...

PT-2023-7624 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 Description: The issue is related to a stack-based buffer overflow in the formSetSysToolDDNS/formGetSysToolDDNS function of the /bin/httpd file. This can be exploited by a remote attacker to cause a denial of...

Tenda AC23 缓冲区错误漏洞

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 suffers from an out-of-bounds write vulnerability, which originates from the...

Tenda AC23 Stack Overflow Vulnerability

Tenda AC23 is a dual-band gigabit wireless router from Tenda, China. Tenda AC23 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary code...

Tenda AC23 fromSetWifiGusetBasic function buffer overflow vulnerability

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda AC23 fromSetWifiGusetBasic function, which can be exploited by an attacker to run arbitrary code in the context of an affected application...

Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15698)

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC23 suffers from a stack overflow vulnerability that originates from a stack overflow in the wpapskcrypto parameter in the fromSetWirelessRepeat function. An attacker could exploit this vulnerability to run arbitrary...

Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15701)

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC23 suffers from a buffer error vulnerability that originates from a stack overflow in the schedStartTime parameter of the setSchedWifi function. An attacker can exploit this vulnerability to run arbitrary code in the...

Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15699)

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23, which can be exploited by an attacker to execute arbitrary code...