CVE-2022-30474

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request...

CVE-2022-30476

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request...

Stack overflow

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request...

Stack overflow

Tenda AC Series Router AC18V15.03.05.196318 has a stack-based buffer overflow vulnerability in function formfastsettingwifiset...

Stack overflow

Tenda AC Seris Router AC18V15.03.05.196318 has a stack-based buffer overflow vulnerability in function fromAddressNat...

CVE-2022-30477

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request...

CVE-2022-30477

The CVE-2022-30477 entry refers to the Tenda AC Series Router AC18_V15.03.05.19(6318) with a stack-based buffer overflow in the httpd module when processing /goform/SetClientState requests. The issue is caused by improper handling in the httpd component, leading to potential impact on confidentia...

CVE-2022-30476

The CVE-2022-30476 entry concerns the Tenda AC Series Router AC18_V15.03.05.19(6318), with a stack-based buffer overflow in the httpd module when processing /goform/SetFirewallCfg. The issue affects the httpd handling of that request, with CVSSv3.1 base score 9.8 (CRITICAL) and network attack vec...

CVE-2022-30475

The CVE-2022-30475 entry concerns Tenda AC Series Router AC18_V15.03.05.19(6318). The vulnerability is described as a stack-based buffer overflow in the httpd module when handling the /goform/WifiExtraSet request. The connected sources confirm the affected product and the vulnerable component, bu...

CVE-2022-30474

CVE-2022-30474 affects Tenda AC Series Router AC18_V15.03.05.19(6318). The heap overflow occurs in the httpd module when processing the /goform/saveParentControlInfo request. This is reported across multiple sources (NVD, Red Hat, CVE listings) with CVSS scores indicating high to critical impact ...

CVE-2022-30472

CVE-2022-30472 affects Tenda AC Series Router AC18_V15.03.05.19(6318). The vulnerability is a stack-based buffer overflow in the function fromAddressNat. The NVD entry reports a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK access, no authentication, and impact to confidentiality, integrity...

CVE-2022-30473

CVE-2022-30473 affects Tenda AC Series Router AC18 with firmware V15.03.05.19(6318). The vulnerability is a stack-based buffer overflow in function form_fast_setting_wifi_set. The CVSS 3.1 data indicate NETWORK attack, no authentication, low complexity, with HIGH availability impact (I/N, A:H), a...

Tenda AC Series Router 缓冲区错误漏洞

Tenda AC Series Router is a series of wireless routers from Tenda China. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a stack-based buffer overflow in the httpd module when processing /goform/SetClientState requests...

Tenda AC Series Router 缓冲区错误漏洞

Tenda AC Series Router is a series of wireless routers from Tenda China. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a stack-based buffer overflow in the httpd module when processing /goform/WifiExtraSet requests...

PT-2022-19078 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version US AC15V1.0BR V15.03.05.20 multi TDE01.bin Description: The issue is related to a command injection vulnerability at the /goform/setsambacfg interface of the device's web interface. This vulnerability can potentially lead t...

cj.tsukuba.ac.jp Cross Site Scripting vulnerability OBB-2559105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ac-auch.fr Cross Site Scripting vulnerability OBB-2544205

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OSV-2022-340 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46646 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliaddcontentmatchpattern readdbparseldbsubsignature...

Input validation

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service...

CVE-2021-22277

CVE-2021-22277 affects ABB 800xA suite (AC 800M, Control Builder Safe, Compact Product Suite – Control and I/O, ABB Base Software for SoftControl). The flaw is an Improper Input Validation vulnerability that can allow a remote attacker to cause a denial of service via the affected control softwar...