Lucene search
+L

763 matches found

Prion
Prion
added 2022/08/19 10:15 p.m.27 views

Buffer overflow

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, formfastsettingwifiset. httpd...

1.7CVSS5.5AI score0.00253EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/19 9:31 p.m.37 views

CVE-2022-36233

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, formfastsettingwifiset. httpd...

5.8AI score0.00253EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/19 9:31 p.m.72 views

CVE-2022-36233

CVE-2022-36233 affects Tenda AC9, specifically V15.03.2.13, where the httpd form_fast_setting_wifi_set function is vulnerable to a stack/buffer overflow. Root cause: buffer overflow in httpd leading to potential denial of service. Exploitation details in the public records indicate an authenticat...

5.5CVSS5.5AI score0.00253EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/19 12:00 a.m.11 views

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.13 is vulnerable to a buffer overflow vulnerability caused by a stack buffer overflow in formfastsettingwifiset in the httpd server. An authenticated local attacker can exploit this vulnerability to cause a denial of service...

5.5CVSS7AI score0.00253EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/08/19 12:00 a.m.40 views

Tenda AC9 Command Injection Vulnerability (CNVD-2022-75820)

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

9.8CVSS5.7AI score0.02417EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/16 1:15 p.m.14 views

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

9.8CVSS5.8AI score0.02417EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/16 1:15 p.m.5 views

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

9.8CVSS7.4AI score0.02417EPSS
SaveExploits1References2
NVD
NVD
added 2022/08/16 1:15 p.m.23 views

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

9.8CVSS0.02417EPSS
SaveExploits1References1
Prion
Prion
added 2022/08/16 1:15 p.m.28 views

Command injection

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

7.5CVSS9.7AI score0.02417EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/16 12:43 p.m.39 views

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

10AI score0.02417EPSS
SaveExploits1References1
EUVD
EUVD
added 2022/08/16 12:43 p.m.11 views

EUVD-2022-38990

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

9.8CVSS9.8AI score0.02417EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/16 12:43 p.m.110 views

CVE-2022-36273

The CVE-2022-36273 entry affects Tenda AC9, specifically version 15.03.2.21_cn. The vulnerability is a command injection via the API endpoint goform/SetSysTimeCfg, enabling an attacker to execute arbitrary commands on the device. Reported impacts are high (confidentiality, integrity, and availabi...

9.8CVSS9.7AI score0.02417EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/16 12:00 a.m.15 views

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

9.8CVSS7.9AI score0.02417EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/16 12:00 a.m.10 views

PT-2022-23288 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 cn Description: The issue is related to command injection via the "goform/SetSysTimeCfg" API endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated...

9.8CVSS9.7AI score0.02417EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/06/29 12:00 a.m.10 views

PT-2022-6755 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

9.8CVSS9.7AI score0.00928EPSS
SaveExploits1References7
OSV
OSV
added 2022/05/24 12:15 p.m.7 views

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

6.5CVSS6.2AI score0.00806EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/24 12:00 a.m.13 views

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 V1.0 V15.03.02.196318 and AC9 V3.0 V15.03.06.42multi versions, which originates from a buffer overflow issue in the web server httpd. When setting up a virtual service, the httpd program will crash and...

6.5CVSS6.9AI score0.00806EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/05/08 12:00 a.m.24 views

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38540)

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 is vulnerable to a stack overflow vulnerability, which originates from the goform/fastsettingwifiset function in the httpd service that does not properly validate data boundaries when performing operations on memory, and can ...

10CVSS4.2AI score0.01665EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/03 4:15 p.m.10 views

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

9.8CVSS7.4AI score0.01665EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/03 4:15 p.m.20 views

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

10CVSS0.01665EPSS
SaveExploits1References1
Rows per page
Query Builder