CVE-2023-49436

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "mac" parameter in /goform/setModules not properly filtering constructed command special characters, commands, etc. This vulnerability can be exploite...

CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...

CVE-2023-49435

Tenda AX9 V22.03.01.46 is vulnerable to command injection...

CVE-2023-49436

CVE-2023-49436 affects Tenda AX9 with firmware version V22.03.01.46. The vulnerability is a command injection in the 'list' parameter of the API endpoint /goform/SetNetControlList . Multiple sources corroborate a critical impact (CVSS v3.1 base score 9.8; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Doc...

CVE-2023-49430

Tenda AX9 (V22.03.01.46) contains a stack overflow in the /goform/SetStaticRouteCfg endpoint, triggered by the 'list' parameter failing to properly validate input length. This is a remote, network-vector vulnerability with high impact (remote code execution or DoS) as reported across multiple sou...

CVE-2023-49431

Summary : CVE-2023-49431 impacts Tenda AX9 routers, specifically version V22.03.01.46. A command injection vulnerability exists in the mac parameter of the API endpoint /goform/SetOnlineDevName . The issue arises from inadequate filtering of constructor characters/commands, enabling arbitrary com...

CVE-2023-49435

CVE-2023-49435 affects Tenda AX9 V22.03.01.46. Multiple sources (CNVD, NVD, Red Hat, CNNVD, etc.) describe a command-injection vulnerability in the /goform/SetNetControlList interface where the list parameter does not properly filter special characters/commands, enabling arbitrary command executi...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "list" parameter of /goform/SetVirtualServerCfg failing to correctly validate the length of the input data. This vulnerability can be exploited by a...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which stems from the list parameter of /goform/SetNetControlList failing to correctly filter construct command special characters, commands, and so on. An attacker can explo...

CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

PT-2023-31221 · Tenda · Tenda Ax9

Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: A command injection issue has been discovered in the mac parameter at the "/goform/SetOnlineDevName" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda AX9...

PT-2023-7507 · Tenda · Tenda Ax9

Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: The issue is related to a SQL command injection vulnerability in the setDeviceInfo feature. This vulnerability can be exploited through the mac parameter at the "/goform/setModules" API endpoint. Th...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which stems from the failure of the "mac" parameter of /goform/SetOnlineDevName to properly filter constructor special characters, commands, etc. This vulnerability can be...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which occurs when the "list" parameter of /goform/SetNetControlList fails to correctly validate the length of the input data, and can be exploited by a remote attacker to...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "list" parameter of /goform/SetStaticRouteCfg failing to correctly validate the length of the input data, and can be exploited by a remote attacker to...

CVE-2023-49433

CVE-2023-49433 affects Tenda AX9 router (version V22.03.01.46). A stack/ buffer overflow exists in the vends’ /goform/SetVirtualServerCfg endpoint, triggered by the long input in the 'list' parameter. Multiple sources describe this as a vulnerability allowing remote exploitation to execute arbitr...

CVE-2023-49432

CVE-2023-49432 affects Tenda AX9 (V22.03.01.46). A stack overflow exists in the deviceList parameter of /goform/setMacFilterCfg. Reported implications include remote arbitrary code execution or denial of service. Multiple sources corroborate the issue; remediation details are limited in the provi...

CVE-2023-49429

CVE-2023-49429 affects Tenda AX9, specifically version V22.03.01.46. Public records across multiple sources describe a SQL command injection in the /goform/setModules endpoint via the mac parameter in setDeviceInfo, enabling arbitrary command execution on successful exploitation. The vulnerabilit...