Shenzhen Jixiang Tengda Technology Co., Ltd AC6 fgets function buffer overflow vulnerability

Shenzhen Jixiang Tenda Technology Co., Ltd AC6 is a dual-band wireless router from Tenda Tenda, supporting IPv4 and IPv6 protocols, adopting 802.11ac/n wireless standard and providing 1167Mbps wireless transmission rate. Ltd. AC6 has a buffer overflow vulnerability, the vulnerability stems from t...

CVE-2023-39670

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39670

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39670

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

Buffer overflow

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

Tenda AC6 安全漏洞

Shenzhen Jixiang Tenda Technology Co., Ltd AC6 is a dual-band wireless router from Tenda Tenda, supporting IPv4 and IPv6 protocols, adopting 802.11ac/n wireless standard and providing 1167Mbps wireless transmission rate. Ltd. AC6 has a buffer overflow vulnerability, the vulnerability stems from t...

CVE-2023-39670

CVE-2023-39670 affects Tenda AC6, specifically US_AC6V1.0BR_V15.03.05.16. The vulnerability is a buffer overflow in the fgets function, with sources reporting potential arbitrary code execution or denial of service. CVSS v3.1 vector from NVD indicates a critical impact (9.8) under network attack ...

CVE-2023-39670

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

PT-2023-27063 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 Description: A buffer overflow issue was discovered via the function fgets. Recommendations: For Tenda AC6 version US AC6V1.0BR V15.03.05.16, consider restricting access to the function fgets until ...

CVE-2023-38937

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function...

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

Tenda AC6 Buffer Error Vulnerability

Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15 .03.06.42multi, and FH1205 V2.0. A security vulnerability exists in version .0.7775, which...

CVE-2023-38931

CVE-2023-38931 is a stack overflow in Tenda devices’ setaccount function when handling the list parameter, affecting multiple models (AC10, AC1206, AC8, AC6, AC7, F1203, AC5, FH1203, etc.). The root cause is improper handling/validation of the list parameter, enabling potential remote code execut...

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

CVE-2023-38936

CVE-2023-38936 concerns multiple Tenda devices (AC10, AC1206, AC6, AC7, AC5, FH1203, AC9, FH1205) where a stack overflow occurs in the function to set WAN speed (formSetSpeedWan) via the speed_dir parameter. Affected firmware versions include V15.03.06.xx ranges listed in the sources. The core is...

Exploit for Classic Buffer Overflow in Tenda Ac6_Firmware

Buffer Overflow in formSetCfm Affected models and firmwa...

Exploit for Classic Buffer Overflow in Tenda Ac6_Firmware

Buffer Overflow in formSetCfm Affected models and firmwa...

ac6-training.com Cross Site Scripting vulnerability OBB-3480332

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...