Tenda AX3 formSetIptv Heap Buffer Overflow DoS

The vulnerability of the formSetIptv function in the Tenda AX3 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

Tenda AX3 DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the parameter serviceName2. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Tenda AX3 Wi-Fi Router DoS

The vulnerability of the wlSetExternParameter function in Tenda AX3 Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda AX3 DoS

The vulnerability of the saveParentControlInfo function in the Tenda AX3 Wi-Fi router software lies in a buffer overflow that occurs during the processing of the deviceId parameter. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2021-33073

Malicious code in bioql PyPI...

EUVD-2021-33072

Malicious code in bioql PyPI...

Tenda AX3 Wi-Fi Router Code Execution

The vulnerability of the AdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the copying of buffers without checking the size of the input data when processing the parameter serverName. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service...

Tenda AX3 Buffer Overflow Privilege Escalation

The vulnerability of the Tenda AX3 Wi-Fi router’s microprogramming software is related to the operation of the function that outputs data beyond the buffer in memory when processing the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to increase their privileges an...

Tenda AX3 SetFirewallCfg Buffer Overflow Vulnerability

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a buffer overflow vulnerability that originates from a boundary error in...

Tenda AX3 Router Buffer Overflow (CVE-2022-24995)

A buffer overflow vulnerability exists in Tenda AX3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Stack overflow

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

Stack overflow

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46394

CVE-2021-46394 describes a stack buffer overflow in Tenda-AX3 router, caused by taking the http parameter startIp into v13 and copying it onto the stack via sscanf in formSetPPTPServerCfg handling. Exploitation path: POST to /goform/SetPptpServerCfg with crafted startIp data can lead to remote co...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46393

CVE-2021-46393 is a stack buffer overflow in the Tenda-AX3 router (V16.03.12.10_CN) due to the formSetPPTPServer function. The vulnerability arises because the v10 variable is sourced from the HTTP parameter startIp and is concatenated into the stack via sscanf without bounds checking, causing ov...

Tenda Ax3 command injection vulnerability

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command injection vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the dmzIp parameter...

Tenda AX3 buffer error vulnerability

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the shareSpeed parameter...