763 matches found
Stack overflow
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...
Stack overflow
Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function...
Command injection
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...
Stack overflow
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function...
Stack overflow
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function...
Stack overflow
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function...
CVE-2022-25441
CVE-2022-25441 affects Tenda AC9 v15.03.2.21, with a remote command execution (RCE) vulnerability via the vlanid parameter in SetIPTVCfg. Root cause cited as failure to properly filter special elements of the construction snippet in vlanid. Impact: high-severity RCE over the network with potentia...
CVE-2022-25441
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...
CVE-2022-25440
CVE-2022-25440 affects Tenda AC9 router (v15.03.2.21). Root cause: a stack overflow in the SetSysTimeCfg function triggered by the ntpserver parameter. Impact indicators in sources describe potential to compromise confidentiality, integrity, and availability (high/critical). No explicit patch/ver...
CVE-2022-25440
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...
CVE-2022-25439
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function...
CVE-2022-25438
Multiple connected sources (Red Hat, CNVD, CNNVD, PRION, CVE databases) corroborate CVE-2022-25438 as a remote command execution/command-injection vulnerability in Tenda AC9 v15.03.2.21, exploited via the SetIPTVCfg function. Affected component: SetIPTVCfg handling in Tenda AC9 firmware. Root cau...
CVE-2022-25439
CVE-2022-25439 affects Tenda AC9 router, specifically version 15.03.2.21. The vulnerability is a stack overflow in the SetIpMacBind function triggered via the list parameter, potentially allowing arbitrary command execution (CNVD-2022-26246/ CNNVD-202203-1849; NVD describes severity as CRITICAL w...
CVE-2022-25438
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...
CVE-2022-25437
CVE-2022-25437 affects Tenda AC9, specifically version 15.03.2.21. The vulnerability is a stack overflow in the SetVirtualServerCfg function triggered by the list parameter. Public sources describe potential arbitrary code execution as a consequence of the overflow. Documented remediation status ...
CVE-2022-25437
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...
CVE-2022-25435
CVE-2022-25435 affects Tenda AC9, specifically v15.03.2.21. The vulnerability is a stack overflow in the SetStaticRoutecfg function exposed via the list parameter, which can lead to arbitrary command execution as described across multiple feeds. The connected documents consistently identify the a...
CVE-2022-25435
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function...
CVE-2022-25434
The CVE-2022-25434 entry concerns Tenda AC9 v15.03.2.21, where a stack overflow is triggered by the firewallen parameter in SetFirewallCfg. Multiple connected sources confirm the vulnerable component and input (firewallen in SetFirewallCfg) and indicate potential arbitrary command execution as th...