CVE-2023-51812

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution RCE vulnerability via the list parameter at /goform/SetNetControlList...

Remote code execution

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution RCE vulnerability via the list parameter at /goform/SetNetControlList...

CVE-2023-51812

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution RCE vulnerability via the list parameter at /goform/SetNetControlList...

CVE-2023-51812

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution RCE vulnerability via the list parameter at /goform/SetNetControlList...

CVE-2023-51812

The CVE-2023-51812 vulnerability affects Tenda AX3 v16.03.12.11, exploitable via the list parameter in /goform/SetNetControlList. The root cause is failure to properly filter elements in the constructed code segment, enabling remote code execution with network access and no user interaction. CVSS...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2023-9804342)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the failure of the function setdevicename to correctly validate the length and size of the input data, and can be...

Tenda AX3 Command Execution Vulnerability

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command execution vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the handler function of /goform/telnet failing to properly filter construct command special characters,...

The vulnerability of the Telnet protocol implementation in Wi-Fi routers powered by Tenda AX3 software allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet protocol implementation in Wi-Fi routers powered by Tenda AX3 software lies in the lack of measures to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2023-49409

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49408

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...

CVE-2023-49408

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...

CVE-2023-49408

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...

CVE-2023-49409

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49409

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

Command injection

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

Stack overflow

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...

Tenda AX3 安全漏洞

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command execution vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the handler function of /goform/telnet failing to properly filter construct command special characters,...

PT-2023-31210 · Tenda · Tenda Ax3

Name of the Vulnerable Software and Affected Versions: Tenda AX3 version 16.03.12.11 Description: A stack overflow issue was discovered via the function set device name. Recommendations: For Tenda AX3 version 16.03.12.11, consider disabling the set device name function until a patch is available...

CVE-2023-49408

CVE-2023-49408 affects Tenda AX3 firmware 16.03.12.11. The vulnerability is a stack overflow in the function set_device_name, caused by insufficient input validation of the name parameter. Exploitation could allow a remote attacker to execute arbitrary code or cause a denial of service (per CNVD ...

CVE-2023-49409

The CVE-2023-49409 entry affects Tenda AX3 firmware V16.03.12.11. The vulnerability is a Command Execution flaw exposed through the /goform/telnet handler, attributed to improper filtering of special characters/commands in the handler. Impact is arbitrary command execution with high-severity pote...