CVE-2023-40845

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'sub34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks...

CVE-2023-40838

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin function 'sub3A1D0' contains a command execution vulnerability...

CVE-2023-40844

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'...

CVE-2023-40840

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."...

CVE-2023-40842

Tengda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."...

CVE-2023-40843

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "sub73004."...

PT-2023-27666 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue concerns a Buffer Overflow that can be triggered via the function fromGetWirelessRepeat. Recommendations: For version 15.03.05.16, consider disabling the fromGetWirelessRepeat function as a...

CVE-2023-40840

The CVE-2023-40840 entry concerns the Tenda AC6 router. The vulnerability is a buffer overflow in the function fromGetWirelessRepeat, triggered by improper validation of input length within the firmware binary US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin. The issue affects Tenda AC6 devices (firmware...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the initIpAddrInfo function failing to...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the sub73004 function failing to correctly...

Tenda AC6 操作系统命令注入漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. Tenda AC6 suffers from a command execution vulnerability that stems from the subADD50 function failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to cause arbitrary...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the formWifiBasicSet function failing to...

PT-2023-27665 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue concerns a command execution vulnerability in the sub ADF3C function. This vulnerability is exploited through the formSetIptv function, which obtains the list a...

PT-2023-27669 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue is related to a Buffer Overflow that can be triggered via the function "sub 73004". Recommendations: For version 15.03.05.16, consider disabling the function "sub 73004" as a temporary...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps and dual-band all-in-one functionality. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the fromGetWirelessRepeat function failing t...

CVE-2023-40843

Affected: Tenda AC6 router (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). Vulnerability: buffer overflow in function sub_73004 due to improper input length validation. Potential impact: arbitrary code execution or denial of service; high impact on confidentiality, integrity, and availability per cit...

CVE-2023-40841

The CVE-2023-40841 entry concerns Tenda AC6 firmware (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is a Buffer Overflow in the add_white_node function, caused by insufficient input length validation. Reported impact is high – potential remote execution of code or a denial of servi...

CVE-2023-40842

CVE-2023-40842 affects Tengda AC6 router software (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The root cause is a buffer overflow in the R7WebsSecurityHandler function, leading to a potentially remote impact. The NVD entry assigns a high severity (CVSS 3.1: 9.8, NETWORK attack, no user interactio...

CVE-2023-40844

CVE-2023-40844 affects the Tenda AC6 router (example image: US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is a Buffer Overflow in the function formWifiBasicSet caused by improper input length validation, as described in multiple sources. Reported impact includes potential arbitrary...

CVE-2023-40837

The CVE-2023-40837 entry describes a command injection in Tenda AC6. Affected firmware (e.g., US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin) is vulnerable in the sub_ADD50 function; when formSetIptv retrieves the fields list and vlanId, they are passed unfiltered to sub_ADD50, enabling arbitrary comma...