CVE-2025-44877

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44877

CVE-2025-44877 affects Tenda AC9, specifically version 15.03.06.42_multi. The vulnerability is a command injection in the formSetSambaConf function triggered via the usbname parameter, allowing an attacker to execute arbitrary commands through a crafted request. The CVSS v3.1 base score is high (...

CVE-2025-44877

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

PT-2025-18791 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.06.42 multi Description: A command injection issue was found in the formSetSambaConf function via the usbname parameter. This allows attackers to execute arbitrary commands via a crafted request. Recommendations: For...

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44872

CVE-2025-44872 affects the Tenda AC9 router (version 15.03.06.42_multi). A command injection flaw exists in the formsetUsbUnload function via the deviceName parameter, allowing an attacker to execute arbitrary commands through a crafted request. Reported impact is high (CVE CVSS v3.1: AV:N/AC:L/P...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a command injection vulnerability, which arises from the deviceName parameter of the formsetUsbUnload function failing to correctly filter constructed command special characters, commands, etc. The vulnerability...

CVE-2025-44877

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

PT-2025-18790 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.06.42 multi Description: A command injection issue was found in the formsetUsbUnload function via the deviceName parameter, allowing attackers to execute arbitrary commands through a crafted request. Recommendations: F...

CVE-2025-45427

In Tenda AC9 v1.0 with firmware V15.03.05.14multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45428

In Tenda ac9 v1.0 with firmware V15.03.05.14multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45428

In Tenda ac9 v1.0 with firmware V15.03.05.14multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-45427

In Tenda AC9 v1.0 with firmware V15.03.05.14multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-45427

In Tenda AC9 v1.0 with firmware V15.03.05.14multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-45428

In Tenda ac9 v1.0 with firmware V15.03.05.14multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 version V15.03.05.14multi, which originates from the /goform/WifiBasicSet security parameter that fails to properly validate the length of the input data, and can be exploited by a...