441 matches found
CVE-2022-24151
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service DoS via the shareSpeed parameter...
CVE-2022-24148
Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter...
CVE-2022-24161
Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the mac parameter...
CVE-2022-24152
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial of Service DoS via the list parameter...
CVE-2022-24150
Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter...
CVE-2022-24156
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service DoS via the list parameter...
CVE-2022-24154
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service DoS via the rebootTime parameter...
CVE-2022-24149
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service DoS via the wpapskcrypto parameter...
CVE-2022-24147
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...
CVE-2022-24153
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...
CVE-2022-24146
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a Denial of Service DoS via the list parameter...
CVE-2022-24158
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service DoS via the list parameter...
CVE-2022-24143
Tenda AX3 v16.03.12.10CN and AX12 22.03.01.2CN was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the timeZone parameter...
CVE-2022-24157
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceList parameter...
CVE-2022-24145
Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of Service DoS via the security and security5g parameters...
The vulnerability of the Tenda AX3 Wi-Fi router’s microprogramming software, related to the execution of operations beyond the buffer in memory, allows attackers to escalate their privileges and cause service interruptions.
The vulnerability of the Tenda AX3 Wi-Fi router’s microprogramming software is related to the operation of the function that outputs data beyond the buffer in memory when processing the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to increase their privileges an...
CVE-2023-47422
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...
CVE-2023-47422
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...
Tenda AX3 Code Execution Vulnerability
The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A code execution vulnerability exists in Tenda AX3 version v16.03.12.11, which stems from the list parameter in /goform/SetNetControlList failing to correctly filter the special elements of the constructed...