Buffer overflow

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check...

Command injection

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADD50" function to execute commands...

Buffer overflow

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "addwhitenode,"...

CVE-2023-40844

CVE-2023-40844 affects the Tenda AC6 router (example image: US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is a Buffer Overflow in the function formWifiBasicSet caused by improper input length validation, as described in multiple sources. Reported impact includes potential arbitrary...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the sub73004 function failing to correctly...

CVE-2023-40847

CVE-2023-40847 affects Tenda AC6 specifically the US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin firmware. The vulnerability is a buffer overflow in the function initIpAddrInfo, where a user-supplied parameter is read and passed to a function without any length check, enabling uncontrolled memory write...

CVE-2023-40840

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."...

PT-2023-27670 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue is related to a Buffer Overflow that can be triggered via the formWifiBasicSet function. Recommendations: For version 15.03.05.16, consider disabling the formWifiBasicSet function as a...

CVE-2023-40839

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADF3C" function to execute commands...

CVE-2023-40838

CVE-2023-40838 concerns the Tenda AC6 router. The vulnerability is in the function sub_3A1D0 and enables command execution due to improper input handling. Affected device: Tenda AC6 version 1.0 (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). Impact is described as high for confidentiality, integrity,...

CVE-2023-40847

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the initIpAddrInfo function failing to...

CVE-2023-40847

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check...

PT-2023-27667 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue concerns a Buffer Overflow that can be triggered via the add white node function. Recommendations: For version 15.03.05.16, consider disabling the add white node function as a temporary...

CVE-2023-40841

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "addwhitenode,"...

CVE-2023-40841

The CVE-2023-40841 entry concerns Tenda AC6 firmware (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is a Buffer Overflow in the add_white_node function, caused by insufficient input length validation. Reported impact is high – potential remote execution of code or a denial of servi...

CVE-2023-40845

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'sub34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks...

CVE-2023-40839

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADF3C" function to execute commands...

CVE-2023-40840

The CVE-2023-40840 entry concerns the Tenda AC6 router. The vulnerability is a buffer overflow in the function fromGetWirelessRepeat, triggered by improper validation of input length within the firmware binary US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin. The issue affects Tenda AC6 devices (firmware...

PT-2023-27669 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue is related to a Buffer Overflow that can be triggered via the function "sub 73004". Recommendations: For version 15.03.05.16, consider disabling the function "sub 73004" as a temporary...