Stack overflow

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

Stack overflow

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46394

CVE-2021-46394 describes a stack buffer overflow in Tenda-AX3 router, caused by taking the http parameter startIp into v13 and copying it onto the stack via sscanf in formSetPPTPServerCfg handling. Exploitation path: POST to /goform/SetPptpServerCfg with crafted startIp data can lead to remote co...

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CVE-2021-46393

CVE-2021-46393 is a stack buffer overflow in the Tenda-AX3 router (V16.03.12.10_CN) due to the formSetPPTPServer function. The vulnerability arises because the v10 variable is sourced from the HTTP parameter startIp and is concatenated into the stack via sscanf without bounds checking, causing ov...

Tenda-AX3 缓冲区错误漏洞

Tenda-AX3 is a dual-band wireless router from Tenda, China. The Tenda-AX3 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow vulnerability in the formSetPPTPServer function of the Tenda-AX3 Router V16.03.12.10CN. No detailed vulnerability details are provide...

Tenda-AX3 缓冲区错误漏洞

Tenda-AX3 is a dual-band wireless router from Tenda China.A buffer error vulnerability exists in Tenda-AX3, which stems from a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. No detailed vulnerability details are currently available...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13935)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the wpapskcrypto parameter...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13940)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the timeZone parameter...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13937)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13936)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via a list parameter...

Tenda Ax3 Heap Overflow Vulnerability

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via the mac parameter...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13932)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the shareSpeed parameter...

Tenda Ax3 Command Injection Vulnerability (CNVD-2022-13939)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command injection vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the gateway, dns1, and dns2 parameters...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13941)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the firewallEn parameter...

Tenda Ax3 Command Injection Vulnerability (CNVD-2022-13933)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command injection vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the remoteIp parameter...