CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

CVE-2023-49435

Tenda AX9 V22.03.01.46 is vulnerable to command injection...

Command injection

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

Command injection

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

Command injection

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList...

Command injection

Tenda AX9 V22.03.01.46 is vulnerable to command injection...

PT-2023-31224 · Tenda · Tenda Ax9

Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: The issue is related to command injection. Recommendations: For Tenda AX9 version V22.03.01.46, at the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

CVE-2023-49432

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg...

CVE-2023-49434

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-49431

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

PT-2023-31225 · Tenda · Tenda Ax9

Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: A command injection issue has been discovered in the list parameter at the "/goform/SetNetControlList" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda A...

CVE-2023-49433

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg...

CVE-2023-49436

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

Tenda AX9 Security Vulnerability

Tenda AX9 is a Wi-Fi 6 router from Tenda, China. A security vulnerability exists in Tenda AX9 version V22.03.01.46, which was discovered to contain a command injection vulnerability via the "list" parameter of /goform/SetNetControlList...

CVE-2023-49434

CVE-2023-49434 affects Tenda AX9 (firmware v22.03.01.46). The vulnerability is a buffer/stack overflow in the /goform/SetNetControlList endpoint, triggered by the input length of the “list” parameter not being properly validated. Exploitation could allow a remote attacker to execute arbitrary cod...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "deviceList" parameter of /goform/setMacFilterCfg not properly validating the length of the input data. could be exploited by a remote attacker to execu...