420 matches found
CVE-2025-11120
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the publi...
CVE-2025-11120
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the publi...
CVE-2025-11120 Tenda AC8 SetServerConfig formSetServerConfig buffer overflow
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the publi...
CVE-2025-11120
CVE-2025-11120 affects Tenda AC8 with firmware 16.03.34.06. The vulnerability is in the formSetServerConfig function of /goform/SetServerConfig, where input boundary checking is insufficient, enabling a remote buffer overflow. An exploit has been publicly disclosed. Multiple feeds confirm the iss...
Tenda AC8 安全漏洞
Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. The Tenda AC8 suffers from a buffer overflow vulnerability that originates from the formSetServerConfig function in the...
CVE-2025-11120: Buffer Copy without Checking Size of Input
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the publi...
CVE-2025-57685
The LB-Link routers, including the BL-AC2100AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000AE4 v2.4.9, BL-AC1900AZ2 v1.0.2, BL-X26AC8 v1.2.8, and BL-LTE300DA4 V1.2.3 models, are vulnerable to unauthorized command injection. Attackers can exploit this vulnerability by accessing the /goform/setserialcfg...
CVE-2025-55852
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...
CVE-2025-55852
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...
PT-2025-35775
Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.06 Description: The Tenda AC8 version 16.03.34.06 is susceptible to a buffer overflow issue in the formWifiBasicSet function. The vulnerability is triggered through the security or security 5g parameter...
CVE-2025-55852: Stack-based Buffer Overflow
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...
CVE-2025-55852
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...
CVE-2025-55852
The Tenda AC8 dual gigabit wireless router (specifically version v16.03.34.06 ) is susceptible to a stack-based buffer overflow vulnerability. The flaw exists within the formWifiBasicSet function, which fails to correctly validate the length of input data provided via the security or security_5g ...
CVE-2025-55852
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...
The vulnerability of the `fromSetSysTime` function in the `/goform/SetSysTimeCfg` microprogramming system of Tenda AC8 routers, which allows a attacker to trigger a service failure.
The vulnerability of the fromSetSysTime function in the /goform/SetSysTimeCfg microprogramming system for Tenda AC8 routers is related to the issue where the operation’s output goes beyond the buffer in memory when processing the timeType parameter. Exploiting this vulnerability could allow an...
The vulnerability of the fromSetWirelessRepeat function in the /goform/WifiExtraSet file of the Tenda AC8 router microprogramming system, which allows a intruder to trigger a service failure.
The vulnerability of the fromSetWirelessRepeat function in the /goform/WifiExtraSet file of the Tenda AC8 router microprogramming system is related to the issue of operations going beyond the buffer boundaries in memory when processing the wpapskcrypto parameter. Exploiting this vulnerability cou...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
CVE-2025-52054: Improper Authentication
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...