CVE-2023-40891

CVE-2023-40891 pertains to Tenda AC8 v4 (US_AC8V4.0si_V16.03.34.06_cn) and is caused by a stack overflow in the /goform/SetFirewallCfg endpoint via the firewallEn parameter. The NVD entry lists a critical CVSS v3.1 score of 9.8 (Impact: Confidentiality/Integrity/Availability all HIGH; Vector: NET...

CVE-2023-40893

CVE-2023-40893 affects Tenda AC8 (v4 US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow triggered by the time parameter to /goform/PowerSaveSet. Public documents describe potential for crashing the application and, in some sources, arbitrary code execution in the application con...

CVE-2023-40900

CVE-2023-40900 affects Tenda AC8 router (example: US_AC8V4.0si_V16.03.34.06_cn). The issue is a stack overflow in the /goform/SetNetControlList endpoint triggered by the parameter list, leading to potential crash or arbitrary code execution in the application context. Technical details consistent...

CVE-2023-40892

This CVE affects Tenda AC8 firmware for the US_AC8V4.0si_V16.03.34.06_cn build. The vulnerability is a stack overflow triggered by crafted values for schedStartTime and schedEndTime at the /goform/openSchedWifi endpoint, per multiple sources. The NVD entry reports a CVSS v3.1 base score of 9.8 (C...

CVE-2023-40897

CVE-2023-40897 affects the Tenda AC8 router. Multiple connected sources describe a stack overflow vulnerability originating from the request parameter mac in the API endpoint "/goform/GetParentControlInfo". Affected device: Tenda AC8 v4 with version string US_AC8V4.0si_V16.03.34.06_cn. Public des...

CVE-2023-40895

The CVE-2023-40895 entry affects Tenda AC8, specifically version v4 US_AC8V4.0si_V16.03.34.06_cn. The issue is described as a stack overflow in the /goform/SetVirtualServerCfg parameter handling. Publicly documented sources consistently note a stack overflow could impact the device’s application ...

CVE-2023-40896

This CVE affects Tenda AC8 devices. A stack overflow is triggered via the parameter list and bindnum in /goform/SetIpMacBind on Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn. Public descriptions consistently state a stack overflow that can crash the application, with some sources noting potential cod...

CVE-2023-40898

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...

PT-2023-27687

Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via the time parameter at the "/goform/PowerSaveSet" API endpoint. This issue can be exploited, potentially leading to unintended consequences...

PT-2023-27694 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetNetControlList" API endpoint. This issue affects the Tenda AC8 router. Recommendations: For Tenda AC8...

Tenda AC8 save_virtualser_data function buffer overflow vulnerability

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

CVE-2023-40899

CVE-2023-40899 affects Tenda AC8 (v4, US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow in the HTTP API endpoint /goform/setMacFilterCfg triggered by the macFilterType and deviceList parameters, potentially crashing the application or allowing arbitrary code execution in the af...

CVE-2023-40893

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...

PT-2023-27688 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetStaticRouteCfg" API endpoint. This issue affects the Tenda AC8 router. Recommendations: For Tenda AC8...

CVE-2023-40895

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. The Tenda AC8 suffe...

PT-2023-27692 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered, which can be triggered via the macFilterType and deviceList parameters at the "/goform/setMacFilterCfg" API endpoint. Recommendations: For Tend...

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC8V4 version V16.03.34.06, which originates from the parameter time in the function sscanf that fails to correctly validate the length of the input data, and can be exploited by a remote...

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC8V4 version V16.03.34.06, which originates from a stack overflow vulnerability in the list parameter of the setqosMiblist function...