CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

CVE-2022-25438

Multiple connected sources (Red Hat, CNVD, CNNVD, PRION, CVE databases) corroborate CVE-2022-25438 as a remote command execution/command-injection vulnerability in Tenda AC9 v15.03.2.21, exploited via the SetIPTVCfg function. Affected component: SetIPTVCfg handling in Tenda AC9 firmware. Root cau...

CVE-2022-25439

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function...

CVE-2022-25439

CVE-2022-25439 affects Tenda AC9 router, specifically version 15.03.2.21. The vulnerability is a stack overflow in the SetIpMacBind function triggered via the list parameter, potentially allowing arbitrary command execution (CNVD-2022-26246/ CNNVD-202203-1849; NVD describes severity as CRITICAL w...

CVE-2022-25437

CVE-2022-25437 affects Tenda AC9, specifically version 15.03.2.21. The vulnerability is a stack overflow in the SetVirtualServerCfg function triggered by the list parameter. Public sources describe potential arbitrary code execution as a consequence of the overflow. Documented remediation status ...

CVE-2022-25437

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...

CVE-2022-25435

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function...

CVE-2022-25435

CVE-2022-25435 affects Tenda AC9, specifically v15.03.2.21. The vulnerability is a stack overflow in the SetStaticRoutecfg function exposed via the list parameter, which can lead to arbitrary command execution as described across multiple feeds. The connected documents consistently identify the a...

CVE-2022-25434

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function...

CVE-2022-25434

The CVE-2022-25434 entry concerns Tenda AC9 v15.03.2.21, where a stack overflow is triggered by the firewallen parameter in SetFirewallCfg. Multiple connected sources confirm the vulnerable component and input (firewallen in SetFirewallCfg) and indicate potential arbitrary command execution as th...

CVE-2022-25433

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function...

CVE-2022-25433

CVE-2022-25433 affects Tenda AC9, firmware version 15.03.2.21, with a stack overflow in the saveparentcontrolinfo function triggered via the urls parameter. This could enable arbitrary command execution on vulnerable devices. Public documents cite potential impact (CNVD) and related CVE reference...

CVE-2022-25428

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function...

CVE-2022-25428

CVE-2022-25428 affects Tenda AC9, version 15.03.2.21, with a stack overflow in the saveparentcontrolinfo function triggered by the deviceId parameter. Multiple sources describe it as allowing arbitrary command execution via this flaw. The NVD data indicates a high/critical impact with network acc...

CVE-2022-25431

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function...

CVE-2022-25431

Summary: CVE-2022-25431 affects Tenda AC9 firmware, specifically version 15.03.2.21, due to multiple stack overflows in the Formsetqosband function triggered via NPTR, V12, V10, and V11 parameters. This vulnerability is described as potentially allowing arbitrary command execution and is rated CR...

CVE-2022-25429

Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function...

CVE-2022-25429

CVE-2022-25429 affects Tenda AC9 router (v15.03.2.21). A buffer overflow exists in the saveparentcontrolinfo function triggered by the time parameter, enabling arbitrary code execution as indicated by the reports. Public details identify the vulnerable component and version; explicit exploitation...

CVE-2022-25427

CVE-2022-25427 affects Tenda AC9, specifically v15.03.2.21. The openSchedWifi function contains a stack overflow via the schedendtime parameter, which CNVD/CNNVD reports as enabling arbitrary command execution. The NVD/CVE records classify impact as high/critical (network attack, no user interact...