342 matches found
EUVD-2026-36078
An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration...
CVE-2026-9151: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration...
TP-LINK Archer 操作系统命令注入漏洞
The TP-Link Archer AX12 V1, AX18 V1, AX1300 V1.6, and AX17 V1 are wireless routers that support VPN functionality, primarily providing network connection and management services. The TP-Link Archer operating system has a command injection vulnerability. This vulnerability stems from the failure t...
The vulnerability of the Telnet service in the microprogramming software of Tenda AX12 wireless routers allows a hacker to enhance their privileges and gain full control over the device.
The vulnerability of the Telnet service provided by the microprogramming software of the Tenda AX12 wireless routers lies in the use of strictly encrypted authentication data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full control over the device...
CVE-2025-62673: Heap-based Buffer Overflow
Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0 and AX12 v1.0 tdpserver modules allows adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network packet containing a maliciously formed field. This issue affects Archer AX53...
CVE-2026-1610
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed...
CVE-2026-1610 Tenda AX12 Pro V2 Telnet Service hard-coded credentials
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed...
CVE-2026-1610
CVE-2026-1610 affects Tenda AX12 Pro V2 (firmware 16.03.49.24_cn). The Telnet Service contains a vulnerability that allows remote manipulation leading to hard-coded credentials. Exploitation is described as remote, with high complexity, and the exploit has been publicly disclosed. No remediation ...
CVE-2026-1610 Tenda AX12 Pro V2 Telnet Service hard-coded credentials
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed...
CVE-2026-1610
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed...
EUVD-2026-4968
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed...
CVE-2026-1610: Use of Hard-coded Credentials
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed...
Tenda AX12 Pro Trust Management Vulnerability
The Tenda AX12 Pro is a router produced by the Chinese company Tenda. The Tenda AX12 Pro V2 16.03.49.24cn version has a vulnerability related to trust management. This vulnerability stems from hard-coded credentials in the Telnet Service...
PT-2026-5329
Name of the Vulnerable Software and Affected Versions Tenda AX12 Pro V2 version 16.03.49.24 cn Description A flaw exists in the Telnet Service component of the software that allows for the retrieval of hard-coded credentials. Successful exploitation of this issue grants full remote control. The...
CVE-2023-49427
Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service DoS via list parameter in SetNetControlList function...
CVE-2023-49424
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg...
CVE-2023-49437
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...
CVE-2023-49428
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...
CVE-2022-37292
Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...