763 matches found
CVE-2025-29386
CVE-2025-29386 affects Tenda AC9 v1.0 with firmware V15.03.05.14_multi. A vulnerability exists in the mac parameter of /goform/AdvSetMacMtuWan where input length/size is not properly validated, causing a stack overflow and enabling remote arbitrary code execution per the linked sources. Documente...
CVE-2025-29032
Tenda AC9 v15.03.05.196318 was discovered to contain a buffer overflow via the formWifiWpsOOB function...
CVE-2025-29032
CVE-2025-29032 affects Tenda AC9, specifically version v15.03.05.19(6318). The vulnerability is a buffer overflow in the formWifiWpsOOB function caused by improper validation of input length. Public sources consistently describe this as a memory-based overflow; CVSS 3.1 metrics indicate Network a...
CVE-2025-29385
In Tenda AC9 v1.0 V15.03.05.14multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
CVE-2025-29387
In Tenda AC9 v1.0 V15.03.05.14multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
CVE-2025-29386
In Tenda AC9 v1.0 V15.03.05.14multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
CVE-2025-29387
In Tenda AC9 v1.0 V15.03.05.14multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
CVE-2025-29384
The CVE-2025-29384 vulnerability affects Tenda AC9 (firmware V15.03.05.14_multi) in the /goform/AdvSetMacMtuWan endpoint, where the wanMTU parameter can overflow a stack-allocated buffer due to improper bounds checking. This stack overflow enables remote attackers to crash the web server and, per...
CVE-2025-29384
In Tenda AC9 v1.0 V15.03.05.14multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
CVE-2025-29384
In Tenda AC9 v1.0 V15.03.05.14multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
EUVD-2025-6520
In Tenda AC9 v1.0 V15.03.05.14multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
Tenda AC9 安全漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a buffer overflow vulnerability that stems from the formWifiWpsOOB function failing to properly validate the length size of the input data, no details of the vulnerability are provided at this time...
CVE-2025-29386
In Tenda AC9 v1.0 V15.03.05.14multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...
CVE-2025-29387
CVE-2025-29387 affects Tenda AC9 router (v1.0, V15.03.05.14_multi). The vulnerability is a stack overflow in the wanSpeed parameter of /goform/AdvSetMacMtuWan, enabling remote arbitrary code execution. The incident is documented across multiple sources (NVD/Red Hat/CNVD/CNNVD, etc.). The provided...
PT-2025-17636
Name of the Vulnerable Software and Affected Versions Tenda AC9 version 1.0 with firmware V15.03.05.14 multi Description The security parameter of the "/goform/WifiBasicSet" API endpoint has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Recommendations For Ten...
CVE-2019-5071
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...
CVE-2019-5072
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...
Tenda AC9 Stack Overflow Vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a stack overflow vulnerability that originates from a stack overflow issue found in /goform/SetOnlineDevName. An attacker can exploit this vulnerability to remotely execute arbitrary code...
Tenda AC9 Command Injection Vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability, which originated when /goform/SetSambaCfg was found to contain a command injection vulnerability. An attacker can exploit this vulnerability to remotely execute arbitrary co...
