954 matches found
PT-2025-7557 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a remote code execution RCE problem. In the formexeCommand function, the parameter cmdinput can cause remote command execution. Recommendations: For Tenda AC6 version...
PT-2025-7556 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the sub 452A4 function. This can potentially allow for exploitation, although specific details about the estimated number of affected devices or...
CVE-2025-0349
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
CVE-2025-0349
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
CVE-2025-0349 Tenda AC6 GetParentControlInfo stack-based overflow
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
CVE-2025-0349
CVE-2025-0349 affects Tenda AC6 (firmware 15.03.05.16). The vulnerability is a stack-based overflow in GetParentControlInfo (/goform/GetParentControlInfo) triggered by manipulating the src/mac argument, which can be exploited remotely. Public exploit/public disclosure is noted. Other parameters m...
CVE-2025-0349 Tenda AC6 GetParentControlInfo stack-based overflow
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
Tenda AC6 安全漏洞
The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from a boundary error in the parameter src when handling untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the...
Tenda AC6 setDoublePppoeConfig module buffer overflow vulnerability
Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from the guestipcheck function in the setDoublePppoeConfig module not properly validating input. No detailed vulnerability details are provided at this ti...
Tenda AC6 Buffer Overflow Vulnerability (CNVD-2025-09869)
Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from improper handling of input by the guestipcheck function of the setDoubleL2tpConfig module. No detailed vulnerability details are provided at this tim...
Tenda AC6 Buffer Overflow Vulnerability (CNVD-2025-09943)
Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from improper handling of the lanMask parameter in the fromAdvSetLanip module. No detailed vulnerability details are provided at this time...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from improper handling of input by the guestipcheck function of the setDoubleL2tpConfig module. No detailed vulnerability details are provided at this tim...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from improper handling of the lanMask parameter in the fromAdvSetLanip module. No detailed vulnerability details are provided at this time...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Shenzhen Tenda Technology Co. A buffer overflow vulnerability exists in Tenda AC6. The vulnerability stems from the guestipcheck function in the setDoublePppoeConfig module not properly validating input. No detailed vulnerability details are provided at this ti...
Tenda AC6 Buffer Overflow Vulnerability (CNVD-2025-15732)
Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the function fromSetSysTime failing to properly validate the length and size of the input data, which can be exploited by an attacker to execute arbitrary code on the...
CVE-2024-52714
Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime...
CVE-2024-52714
Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime...
Tenda AC6 安全漏洞
Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the function fromSetSysTime failing to properly validate the length and size of the input data, which can be exploited by an attacker to execute arbitrary code on the...
CVE-2024-52714
CVE-2024-52714 affects Tenda AC6 (v2.0, firmware 15.03.06.50). The issue is a buffer overflow in the fromSetSysTime function caused by insufficient validation of input length/size, which can allow an attacker to execute arbitrary code or cause denial of service. Red Hat/CNVD/CNNVD entries corrobo...
PT-2024-9412 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.50 Description: The issue is related to a buffer overflow in the fromSetSysTime function. This buffer overflow is caused by copying data without checking the size of the input, which can be exploited by a remote...