CVE-2023-41560

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

CVE-2023-41563

CVE-2023-41563 affects Tenda AC9 (V3.0 V15.03.06.42_multi) and Tenda AC5 (US_AC5V1.0RTL_V15.03.06.28). The root cause is a stack overflow in the GetParentControlInfo API when processing the mac parameter via /goform/GetParentControlInfo. Documents indicate this can lead to remote code execution o...

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

Tenda AC9 缓冲区错误漏洞

The Tenda AC9 is a wireless router from Tenda China. A buffer error vulnerability exists in the Tenda AC9 that stems from a buffer overflow in the mac parameter of /goform/GetParentControlInfo...

CVE-2023-41553

CVE-2023-41553 affects Tenda AC9 and AC5 routers: a stack overflow via the parameter list at /goform/SetStaticRouteCfg in Tenda AC9 V3.0 V15.03.06.42_multi and AC5 US_AC5V1.0RTL_V15.03.06.28. The NVD entry lists CVSS v3.1: CRITICAL (9.8, Network, Low attack complexity, no privileges, no user inte...

CVE-2023-41561

The CVE-2023-41561 issue affects Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28. A stack overflow is triggered via parameters startIp and endIp in the API endpoint /goform/SetPptpServerCfg. The connected documents confirm the affected products and the vulnerable parame...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC9 due to a buffer overflow in the firewallEn parameter of /goform/SetFirewallCfg...

CVE-2023-41554

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

CVE-2023-41560

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC9, which is caused by a buffer overflow issue in the startIp and endIp parameters of /goform/SetPptpServerCfg...

CVE-2023-41552

The CVE-2023-41552 entry concerns Tenda AC7 (V15.03.06.44) and AC9 (V15.03.06.42_multi). A stack overflow is triggered via the ssid parameter in the /goform/fast_setting_wifi_set API endpoint. Connected documents confirm this vulnerability class and endpoint, with no documented exploit details in...

CVE-2023-41560

CVE-2023-41560 affects Tenda AC9 (V3.0 V15.03.06.42_multi). It is a stack-based overflow in the firewallEn parameter at /goform/SetFirewallCfg, potentially enabling remote denial of service/crash. CVSS v3.1 base score 9.8 (CRITICAL); attack vector NETWORK, no user interaction. The provided docume...

PT-2023-4719 · Tenda · Tenda Ac9 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC9 versions V3.0 V15.03.06.42 multi Tenda AC5 versions US AC5V1.0RTL V15.03.06.28 Description: The issue is related to a stack overflow in the GetParentControlInfo function of Tenda AC9 and Tenda AC5 router software. This occurs when t...

CVE-2023-38937

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function...

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

CVE-2023-38930

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42multi and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function...

Design/Logic Flaw

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

Stack overflow

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42multi and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function...