PT-2024-14343 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.stb.port parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround, consider restrictin...

CVE-2023-51957

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv...

CVE-2023-51956

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv...

CVE-2023-51971

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo...

CVE-2023-51958

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv...

CVE-2023-51969

CVE-2023-51969 affects Tenda AX1803 router (v1.0.0.1). The connected sources describe a stack overflow in the getIptvInfo function triggered via the iptv.city.vlan parameter. Root cause: a stack overflow vulnerability in the handling of that parameter. Impact stated across sources is high/confide...

CVE-2023-51953

The Tenda AX1803 router (v1.0.0.1) has a stack overflow in the formSetIptv path exposed via the iptv.stb.mode parameter. A crafted HTTP request using this parameter can lead to arbitrary code execution on the device, as noted by CNVD-2024-02217 and related records. CVSS data in the CVE entry indi...

CVE-2023-51970

The CVE-2023-51970 entry concerns Tenda AX1803 v1.0.0.1, where a stack overflow can be triggered via the iptv.stb.mode parameter in the formSetIptv function. Multiple sources (NVD, Red Hat, CNVD/CNNVD, CVE records) describe the vulnerability as a buffer/stack overflow in the input validation path...

CVE-2023-51962

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo...

CVE-2023-51968

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo...

CVE-2023-51957

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv...

CVE-2023-51957

CVE-2023-51957 affects Tenda AX1803 v1.0.0.1 through a stack overflow in the iptv.stb.mode parameter of the formGetIptv function. Multiple sources describe the vulnerability as a buffer/stack overflow that can potentially allow arbitrary code execution or denial of service on affected devices. Th...

CVE-2023-51972

Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp...

CVE-2023-51968

Affected product: Tenda AX1803 router (v1.0.0.1). Component/trigger: getIptvInfo() function vulnerable to a stack overflow via the adv.iptv.stballvlans parameter. Root cause: improper input length validation in getIptvInfo leading to stack overflow. Impact (as stated): potential remote code execu...

CVE-2023-51969

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo...

CVE-2023-51955

CVE-2023-51955 affects Tenda AX1803 v1.0.0.1. A stack overflow arises in the formSetIptv() function triggered by the adv.iptv.stballvlans parameter, exposing the device to remote exploitation over the network. Multiple sources (NVD, CNVD, Red Hat, CNNVD, CVE listing) describe potential arbitrary ...

PT-2024-14346 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the adv.iptv.stballvlans parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider disabling the formGetIptv...

CVE-2023-51965

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo...

CVE-2023-51959

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A command injection vulnerability exists in the Tenda AX1803 v1.0.0.1, which stems from the fromAdvSetLanIp method failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited ...