CVE-2025-0528 Tenda AC8/AC10/AC18 HTTP Request telnet command injection

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulation leads to command injection. The attack may be launched...

CVE-2025-0528 Tenda AC8/AC10/AC18 HTTP Request telnet command injection

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulation leads to command injection. The attack may be launched...

PT-2025-7558 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.06 Description: The issue is related to a Buffer Overflow in the get parentControl list Info function. Recommendations: For Tenda AC8 version 16.03.34.06, consider disabling the get parentControl list Info function...

Tenda AC8 安全漏洞

Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability that originates from the failure of the schedEndTime parameter of the setSchedWifi function in the file /goform/openSchedWifi to correctly validate the length size of the input dat...

Tenda AC8 安全漏洞

Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability, which originates from the failure of the schedStartTime parameter of the setSchedWifi function in file /goform/openSchedWifi to correctly validate the length of the input data,...

PT-2025-1260 · Tenda · Tenda Ac10 +2

Name of the Vulnerable Software and Affected Versions: Tenda AC8 versions 16.03.10.20 Tenda AC10 versions 16.03.10.20 Tenda AC18 versions 16.03.10.20 Description: A critical issue has been found in the HTTP Request Handler component of the affected devices, specifically in the /goform/telnet file...

The vulnerability of the route_static_check function in the /goform/SetStaticRouteCfg function of the Tenda AC8 router software, which allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the routeStaticCheck function in the /goform/SetStaticRouteCfg function of the Tenda AC8 router microsystem is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of dat...

Tenda AC8 Stack Overflow Vulnerability (CNVD-2025-09870)

The Tenda AC8 is a wireless router manufactured by Tenda for home and small business network connectivity. A stack overflow vulnerability exists in the Tenda AC8. The vulnerability originates in the parameter list of the routestaticcheck function in the /goform/SetStaticRouteCfg file and results ...

CVE-2024-11745

A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function routestaticcheck of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploi...

CVE-2024-11745

A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function routestaticcheck of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploi...

CVE-2024-11745 Tenda AC8 SetStaticRouteCfg route_static_check stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function routestaticcheck of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploi...

CVE-2024-11745

CVE-2024-11745 affects Tenda AC8 (firmware 16.03.34.09). The vulnerability is in the route_static_check function of /goform/SetStaticRouteCfg, where argument-list manipulation causes a stack-based buffer overflow. This can be exploited remotely, with the exploit publicly disclosed. The issue is d...

CVE-2024-11745 Tenda AC8 SetStaticRouteCfg route_static_check stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function routestaticcheck of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploi...

Tenda AC8 安全漏洞

The Tenda AC8 is a wireless router manufactured by Tenda for home and small business network connectivity. A stack overflow vulnerability exists in the Tenda AC8. The vulnerability originates in the parameter list of the routestaticcheck function in the /goform/SetStaticRouteCfg file and results ...

PT-2024-8867 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue affects the route static check function of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to a stack-based buffer overflow. This issue can be exploit...

The vulnerability of the formSetRebootTimer function (/goform/SetSysAutoRebbotCfg) in the Tenda AC8 router’s microprogramming system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compareparentcontroltime function /goform/saveParentControlInfo in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `compare_parentcontrol_time` function (/goform/saveParentControlInfo) in the Tenda AC8 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compareparentcontroltime function /goform/saveParentControlInfo in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Exploit for Out-of-bounds Write in Tenda Ac8_Firmware

CVE-2023-33669 Exploit Exploit for a stack overflow vulnerabi...

CVE-2024-10280 Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer...

CVE-2024-10130

A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack can be initiated remotely. Th...