973 matches found
Buffer overflow
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'sub34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks...
Buffer overflow
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "sub7D858."...
CVE-2023-40840
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."...
CVE-2023-40844
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'...
CVE-2023-40848
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "sub7D858."...
CVE-2023-40839
CVE-2023-40839 affects the Tenda AC6 router (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is in the internal function sub_ADF3C where the router passes unfiltered values from the list and vlanId fields in the formSetIptv flow to sub_ADF3C, enabling arbitrary command execution . Pu...
CVE-2023-40847
CVE-2023-40847 affects Tenda AC6 specifically the US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin firmware. The vulnerability is a buffer overflow in the function initIpAddrInfo, where a user-supplied parameter is read and passed to a function without any length check, enabling uncontrolled memory write...
CVE-2023-40841
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "addwhitenode,"...
PT-2023-27668 · Tengda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tengda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue is related to a Buffer Overflow that can be exploited via the R7WebsSecurityHandler function. Recommendations: For Tengda AC6 version US AC6V1.0BR V15.03.05.16...
PT-2023-27664 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 Description: The issue concerns a command execution vulnerability in the 'sub 3A1D0' function. Recommendations: For version 1.0, at the moment, there is no information about a newer version that contains a fix for this...
PT-2023-27671 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 Description: The issue concerns a buffer overflow that occurs via the function sub 34FD0. This function reads user-provided parameters and passes variables without performing any length checks, leading to the overflow...
CVE-2023-40838
CVE-2023-40838 concerns the Tenda AC6 router. The vulnerability is in the function sub_3A1D0 and enables command execution due to improper input handling. Affected device: Tenda AC6 version 1.0 (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). Impact is described as high for confidentiality, integrity,...
CVE-2023-40840
The CVE-2023-40840 entry concerns the Tenda AC6 router. The vulnerability is a buffer overflow in the function fromGetWirelessRepeat, triggered by improper validation of input length within the firmware binary US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin. The issue affects Tenda AC6 devices (firmware...
CVE-2023-40845
CVE-2023-40845 affects the Tenda AC6 router. Multiple sources describe a buffer overflow in the sub_34FD0 function, caused by reading user-supplied parameters and passing them to a callee without length checks. This can lead to arbitrary code execution or a crash, as indicated by the described im...
CVE-2023-40848
The CVE-2023-40848 entry concerns Tenda AC6 (firmware US_AC6V1.0BR_V15.03.05.16) with a buffer overflow in the sub_7D858 function. Affected component: router firmware; root cause: improper validation of input length leading to overflow. Impact as stated: potential arbitrary code execution or deni...
CVE-2023-40837
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADD50" function to execute commands...
CVE-2023-40847
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check...
CVE-2023-40839
Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADF3C" function to execute commands...