Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which stems from the list parameter of /goform/SetNetControlList failing to correctly filter construct command special characters, commands, and so on. An attacker can explo...

Tenda AX9 Security Vulnerability

Tenda AX9 is a Wi-Fi 6 router from Tenda, China. A security vulnerability exists in Tenda AX9 version V22.03.01.46, which was discovered to contain a command injection vulnerability via the "list" parameter of /goform/SetNetControlList...

CVE-2023-49434

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-49433

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "deviceList" parameter of /goform/setMacFilterCfg not properly validating the length of the input data. could be exploited by a remote attacker to execu...

PT-2023-31223

Name of the Vulnerable Software and Affected Versions Tenda AX9 version V22.03.01.46 Description A stack overflow issue has been identified in the list parameter at the "/goform/SetNetControlList" API endpoint. This issue can be exploited, potentially leading to unintended consequences...

CVE-2023-49429: Improper Neutralization of Special Elements used in an SQL Command

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which stems from the failure of the "mac" parameter of /goform/SetOnlineDevName to properly filter constructor special characters, commands, etc. This vulnerability can be...

CVE-2023-49430: Out-of-bounds Write

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...

PT-2023-31224 · Tenda · Tenda Ax9

Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: The issue is related to command injection. Recommendations: For Tenda AX9 version V22.03.01.46, at the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

CVE-2023-49434

CVE-2023-49434 affects Tenda AX9 (firmware v22.03.01.46). The vulnerability is a buffer/stack overflow in the /goform/SetNetControlList endpoint, triggered by the input length of the “list” parameter not being properly validated. Exploitation could allow a remote attacker to execute arbitrary cod...

CVE-2023-49436

CVE-2023-49436 affects Tenda AX9 with firmware version V22.03.01.46. The vulnerability is a command injection in the 'list' parameter of the API endpoint /goform/SetNetControlList . Multiple sources corroborate a critical impact (CVSS v3.1 base score 9.8; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Doc...

CVE-2023-49429

CVE-2023-49429 affects Tenda AX9, specifically version V22.03.01.46. Public records across multiple sources describe a SQL command injection in the /goform/setModules endpoint via the mac parameter in setDeviceInfo, enabling arbitrary command execution on successful exploitation. The vulnerabilit...