Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a home wireless router launched by Tenda brand, which is mainly positioned as a wall-penetrating enhanced dual-band gigabit device for home network coverage needs. The Tenda AC7 suffers from a stack buffer overflow vulnerability, which originates from the security5g parameter of...

PT-2023-27973 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Description: A stack overflow issue was discovered in Tenda AC7, which can be triggered via the security 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda AC7 version...

CVE-2023-41555

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security5g at url /goform/WifiBasicSet...

PT-2023-27970 · Tenda · Tenda Ac7 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Tenda AC9 version V15.03.06.42 multi Description: A stack overflow issue was discovered, which occurs via the ssid parameter at the "/goform/fast setting wifi set" API endpoint. Recommendations: For Tenda AC7...

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the page parameter of /goform/NatStaticSetting...

PT-2023-27976 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Description: A stack overflow issue was discovered via the timeZone parameter at the "/goform/SetSysTimeCfg" API endpoint. This issue affects the Tenda AC7 router. Recommendations: For Tenda AC7 version...

CVE-2023-41557

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat...

PT-2023-27975 · Tenda · Tenda Ac7 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 1.0 V15.03.06.44 Tenda AC5 version 1.0RTL V15.03.06.28 Description: A stack overflow issue was discovered via parameter entrys and mitInterface at the "/goform/addressNat" API endpoint. Recommendations: For Tenda AC7 version...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the time parameter of /goform/PowerSaveSet...

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

CVE-2023-41559

The CVE-2023-41559 entry describes a stack overflow in the Tenda AC7/AC9/AC5 firmware (AC7 V1.0 V15.03.06.44; AC9 V3.0 V15.03.06.42_multi; AC5 V1.0RTL_V15.03.06.28) triggered by a parameter in the page at /goform/NatStaticSetting. The root cause is a stack overflow in the affected page parameter ...

CVE-2023-41552

The CVE-2023-41552 entry concerns Tenda AC7 (V15.03.06.44) and AC9 (V15.03.06.42_multi). A stack overflow is triggered via the ssid parameter in the /goform/fast_setting_wifi_set API endpoint. Connected documents confirm this vulnerability class and endpoint, with no documented exploit details in...

CVE-2023-41558

CVE-2023-41558 affects Tenda AC7 router (V15.03.06.44). The issue is a stack overflow in the timeZone parameter of /goform/SetSysTimeCfg, allowing malformed input to overflow a stack buffer. Reported impacts include potential arbitrary code execution or denial of service. Public details across so...

CVE-2023-41557

CVE-2023-41557 affects Tenda AC7 (v1.0, v15.03.06.44) and Tenda AC5 (v1.0RTL, v15.03.06.28). A stack overflow is triggered via the entrys and mitInterface parameters at /goform/addressNat, enabling a high-severity, network-based impact with no user interaction. CVSS v3.1 indicates a critical base...

CVE-2023-41556

CVE-2023-41556 affects Tenda AC7 (v1.0, v15.03.06.44), AC9 (v3.0, v15.03.06.42_multi) and AC5 (v1.0RTL, v15.03.06.28). The vulnerability is a stack overflow in the /goform/SetIpMacBind endpoint triggered via the parameter list. This has been consistently reported across multiple feeds (NVD, Red H...

CVE-2023-41555

The CVE-2023-41555 entry affects Tenda AC7, specifically the Goform/WifiBasicSet API at the security_5g parameter. Connected sources describe a stack overflow in input validation that can be triggered via security_5g, with potential for arbitrary code execution or denial of service. Several repor...

CVE-2023-41562

CVE-2023-41562 affects Tenda routers: AC7 v1.0 (V15.03.06.44), AC9 v3.0 (V15.03.06.42_multi), and AC5 (US_AC5V1.0RTL_V15.03.06.28). The vulnerability is a stack overflow triggered by the time parameter in the /goform/PowerSaveSet API. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL)...

CVE-2023-41555

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security5g at url /goform/WifiBasicSet...

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a dual-band wireless router with a strong signal and stable performance for large, multi-bedroom users. The Tenda AC7 suffers from a stack buffer overflow vulnerability that originates from the timeZone parameter of /goform/SetSysTimeCfg failing to correctly validate the length a...