763 matches found
Buffer overflow
Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, formfastsettingwifiset. httpd...
CVE-2022-36233
Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, formfastsettingwifiset. httpd...
CVE-2022-36233
CVE-2022-36233 affects Tenda AC9, specifically V15.03.2.13, where the httpd form_fast_setting_wifi_set function is vulnerable to a stack/buffer overflow. Root cause: buffer overflow in httpd leading to potential denial of service. Exploitation details in the public records indicate an authenticat...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.13 is vulnerable to a buffer overflow vulnerability caused by a stack buffer overflow in formfastsettingwifiset in the httpd server. An authenticated local attacker can exploit this vulnerability to cause a denial of service...
Tenda AC9 Command Injection Vulnerability (CNVD-2022-75820)
Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
Command injection
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
EUVD-2022-38990
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-36273
The CVE-2022-36273 entry affects Tenda AC9, specifically version 15.03.2.21_cn. The vulnerability is a command injection via the API endpoint goform/SetSysTimeCfg, enabling an attacker to execute arbitrary commands on the device. Reported impacts are high (confidentiality, integrity, and availabi...
Tenda AC9 操作系统命令注入漏洞
Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...
PT-2022-23288 · Tenda · Tenda Ac9
Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 cn Description: The issue is related to command injection via the "goform/SetSysTimeCfg" API endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated...
PT-2022-6755 · Tenda · Tenda Fh1202 +5
Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...
CVE-2021-42659
There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 V1.0 V15.03.02.196318 and AC9 V3.0 V15.03.06.42multi versions, which originates from a buffer overflow issue in the web server httpd. When setting up a virtual service, the httpd program will crash and...
Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38540)
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 is vulnerable to a stack overflow vulnerability, which originates from the goform/fastsettingwifiset function in the httpd service that does not properly validate data boundaries when performing operations on memory, and can ...
CVE-2022-28560
There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...
CVE-2022-28560
There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...