PT-2024-14357 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A command injection issue was discovered via the fromAdvSetLanIp function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider disabling the fromAdvSetLanIp function until a patch is available...

CVE-2023-51952

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.stb.mode parameter of the formGetIptv method failing to correctly validate the length and size of the input data, and can be exploited...

CVE-2023-51972

Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp...

CVE-2023-51970

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

CVE-2023-51961

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv...

CVE-2023-51963

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo...

CVE-2023-51965

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo...

CVE-2023-51967

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo...

CVE-2023-51964

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo...

CVE-2023-51961

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv...

CVE-2023-51953

The Tenda AX1803 router (v1.0.0.1) has a stack overflow in the formSetIptv path exposed via the iptv.stb.mode parameter. A crafted HTTP request using this parameter can lead to arbitrary code execution on the device, as noted by CNVD-2024-02217 and related records. CVSS data in the CVE entry indi...

CVE-2023-51957

CVE-2023-51957 affects Tenda AX1803 v1.0.0.1 through a stack overflow in the iptv.stb.mode parameter of the formGetIptv function. Multiple sources describe the vulnerability as a buffer/stack overflow that can potentially allow arbitrary code execution or denial of service on affected devices. Th...

CVE-2023-51968

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo...

CVE-2023-51968

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo...

CVE-2023-51970

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

CVE-2023-51953

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

CVE-2023-51971

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo...

Tenda AX1803 Security Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda, China. A security vulnerability exists in the Tenda AX1803 v1.0.0.1, which is caused by a buffer overflow vulnerability in the adv.iptv.stbpvid parameter of the setIptvInfo method...

CVE-2023-51962

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo...