CVE-2023-25216

The CVE-2023-25216 entry concerns the Tenda AC5 router (US_AC5V1.0RTL_V15.03.06.28). A stack overflow in the formSetFirewallCfg function is reported, allowing an attacker to trigger a Denial of Service (DoS) or execute arbitrary code via a crafted payload. The available documents uniformly descri...

PT-2023-19989 · Tenda · Tenda Ac5

Name of the Vulnerable Software and Affected Versions: Tenda AC5 version US AC5V1.0RTL V15.03.06.28 Description: The issue is related to a stack overflow via the form fast setting wifi set function, which can be exploited to cause a Denial of Service DoS or execute arbitrary code using a crafted...

CVE-2023-25215: Out-of-bounds Write

Tenda AC5 USAC5V1.0RTLV15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

CVE-2023-25212: Out-of-bounds Write

Tenda AC5 USAC5V1.0RTLV15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

CVE-2023-25214

Tenda AC5 USAC5V1.0RTLV15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

CVE-2023-25219

CVE-2023-25219 affects the Tenda AC5 device family (example: US_AC5V1.0RTL_V15.03.06.28). The vulnerability is a stack overflow in the fromDhcpListClient function, enabling a crafted payload to cause a Denial of Service or to allow arbitrary code execution. Public references in the provided docum...

Tenda AC5 缓冲区错误漏洞

Tenda AC5 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC5 USAC5V1.0RTLV15.03.06.28 version, which stems from a stack-based buffer overflow issue in the fromSetSysTime function, which can be exploited by an attacker to cause a denial of service DoS or to...

CVE-2023-25213: Out-of-bounds Write

Tenda AC5 USAC5V1.0RTLV15.03.06.28 was discovered to contain a stack overflow via the checkparamchanged function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

PT-2022-6755 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

PT-2022-12274 · Tenda · Tenda Ac15 +1

Name of the Vulnerable Software and Affected Versions: Tenda devices, such as AC15V1.0 version V15.03.05.20 multi and AC5V1.0 version V15.03.06.48 multi Description: The issue allows an attacker to bypass authentication, potentially obtaining sensitive information. This can be combined with...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

Cross site scripting

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

Tenda AC5 AC1200 Wireless Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

Tenda AC5 AC1200 跨站脚本漏洞

The Tenda AC5 is an AC1200 smart dual-band WiFi router. A stored cross-site scripting vulnerability exists in the /main.html Wifi setting in Tenda AC5 V15.03.06.47multi. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the Wifi Name parameter...

Tenda AC5 Cross-Site Scripting Vulnerability

The Tenda AC5 is an AC1200 smart dual-band WiFi router. A stored cross-site scripting vulnerability exists in the /main.html Wifi setting in Tenda AC5 V15.03.06.47multi. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

CVE-2021-3186 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Tenda AC5 AC1200 router, specifically in the /main.html Wifi Settings page where the Wifi Name parameter can be exploited to inject arbitrary script/HTML. Affected firmware version is V15.03.06.47_multi. Public refer...

PT-2021-19554 · Tenda · Tenda Ac5 Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC5 AC1200 version V15.03.06.47 multi Description: A Stored Cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter in the Wifi Settings, specifically in the...