CVE-2023-40837

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'subADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "subADD50" function to execute commands...

CVE-2023-40845

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'sub34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks...

CVE-2023-40848

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via the function "sub7D858."...

CVE-2023-40842

CVE-2023-40842 affects Tengda AC6 router software (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The root cause is a buffer overflow in the R7WebsSecurityHandler function, leading to a potentially remote impact. The NVD entry assigns a high severity (CVSS 3.1: 9.8, NETWORK attack, no user interactio...

PT-2023-27668 · Tengda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tengda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue is related to a Buffer Overflow that can be exploited via the R7WebsSecurityHandler function. Recommendations: For Tengda AC6 version US AC6V1.0BR V15.03.05.16...

PT-2023-27664 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 Description: The issue concerns a command execution vulnerability in the 'sub 3A1D0' function. Recommendations: For version 1.0, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-40845

CVE-2023-40845 affects the Tenda AC6 router. Multiple sources describe a buffer overflow in the sub_34FD0 function, caused by reading user-supplied parameters and passing them to a callee without length checks. This can lead to arbitrary code execution or a crash, as indicated by the described im...

CVE-2023-40844

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'...

CVE-2023-40842

Tengda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."...

PT-2023-27671 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 Description: The issue concerns a buffer overflow that occurs via the function sub 34FD0. This function reads user-provided parameters and passes variables without performing any length checks, leading to the overflow...

CVE-2023-40838

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'sub3A1D0' contains a command execution vulnerability...

CVE-2023-40838

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'sub3A1D0' contains a command execution vulnerability...

PT-2023-27666 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue concerns a Buffer Overflow that can be triggered via the function fromGetWirelessRepeat. Recommendations: For version 15.03.05.16, consider disabling the fromGetWirelessRepeat function as a...

PT-2023-27673 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue is related to a Buffer Overflow that occurs via the function "initIpAddrInfo". This function reads in a user-provided parameter and passes the variable without...

CVE-2023-40842

Tengda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."...

CVE-2023-40848

The CVE-2023-40848 entry concerns Tenda AC6 (firmware US_AC6V1.0BR_V15.03.05.16) with a buffer overflow in the sub_7D858 function. Affected component: router firmware; root cause: improper validation of input length leading to overflow. Impact as stated: potential arbitrary code execution or deni...

CVE-2023-40843

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "sub73004."...

CVE-2023-40843

Affected: Tenda AC6 router (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). Vulnerability: buffer overflow in function sub_73004 due to improper input length validation. Potential impact: arbitrary code execution or denial of service; high impact on confidentiality, integrity, and availability per cit...

CVE-2023-40837

The CVE-2023-40837 entry describes a command injection in Tenda AC6. Affected firmware (e.g., US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin) is vulnerable in the sub_ADD50 function; when formSetIptv retrieves the fields list and vlanId, they are passed unfiltered to sub_ADD50, enabling arbitrary comma...

Tenda AC6 操作系统命令注入漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a command execution vulnerability that stems from the sub3A1D0 function failing to properly filte...