Lucene search
+L

349 matches found

Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•23 views

PT-2025-27553 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the addWifiMacFilter function, which can be exploited via the deviceId parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, as a...

6.5CVSS6.8AI score0.00434EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2025/03/25 12:00 a.m.•21 views

Tenda F1202 Router Form Set Device Name Code Execution

The vulnerability of the formSetDeviceName function in the Tenda F1202 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the deviceId parameter. Exploiting this vulnerability could allow a remote attacker to execut...

10CVSS7.9AI score0.0085EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/03/22 12:18 a.m.•26 views

CVE-2025-29101

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

7.5CVSS7.4AI score0.00484EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/20 1:15 p.m.•22 views

CVE-2025-29101

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

7.5CVSS7.4AI score0.00484EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/20 1:15 p.m.•45 views

CVE-2025-29101

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

7.5CVSS0.00484EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/20 12:00 a.m.•47 views

CVE-2025-29101

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

0.00484EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•9 views

PT-2025-12334

Name of the Vulnerable Software and Affected Versions Tenda AC8V4.0 version V16.03.34.06 Description The issue is related to a stack overflow that occurs via the deviceid parameter in the get parentControl list Info function. This allows for potential exploitation. No information is provided abou...

7.8CVSS7.4AI score0.00484EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•19 views

Tenda AC8 security vulnerabilities

Tenda AC8 is a wireless router from Tenda, a Chinese company. The Tenda AC8 suffers from a stack buffer overflow vulnerability, which stems from the deviceid parameter in the getparentControllistInfo function failing to properly validate the length of the input data, which can be exploited by an...

7.5CVSS8.2AI score0.00484EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/20 12:00 a.m.•15 views

CVE-2025-29101

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

7.4AI score0.00484EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/20 12:00 a.m.•114 views

CVE-2025-29101

The Tenda AC8V4.0 wireless router, specifically version V16.03.34.06 , contains a stack-based buffer overflow vulnerability (CWE-121). The flaw exists in the get_parentControl_list_Info function due to a failure to properly validate the length of the deviceid parameter, which allows for reading d...

7.5CVSS7.4AI score0.00484EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•8 views

CVE-2025-29101: Stack-based Buffer Overflow

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...

7.5CVSS7.4AI score0.00484EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 8:15 a.m.•20 views

CVE-2025-29359

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

7.5CVSS6AI score0.00522EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/13 2:15 p.m.•26 views

CVE-2025-29359

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

7.5CVSS0.00522EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/13 2:15 p.m.•18 views

CVE-2025-29359

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

7.5CVSS6AI score0.00522EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/13 12:00 a.m.•104 views

CVE-2025-29359

The Tenda RX3 (specifically model US_RX3V1.0br_V16.03.13.11_multi_TDE01 ) is vulnerable to a Buffer Overflow (CWE-120) triggered via the deviceId parameter at the /goform/saveParentControlInfo API endpoint. An attacker can exploit this flaw by sending a crafted packet to cause a Denial of Service...

7.5CVSS6AI score0.00522EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/03/13 12:00 a.m.•36 views

CVE-2025-29359

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

0.00522EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/13 12:00 a.m.•9 views

CVE-2025-29359

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

6AI score0.00522EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/13 12:00 a.m.•12 views

CVE-2025-29359: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

7.5CVSS6AI score0.00522EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/13 12:00 a.m.•12 views

PT-2025-11180

Name of the Vulnerable Software and Affected Versions: Tenda RX3 US RX3V1.0br V16.03.13.11 multi TDE01 Description: The issue is related to a Buffer Overflow that can be triggered via the deviceId parameter at the "/goform/saveParentControlInfo" API endpoint. This allows attackers to cause a Deni...

7.5CVSS6.1AI score0.00522EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/11/18 12:00 a.m.•21 views

CVE-2024-50804

Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via the DeviceDeviceID.dat.bak file within the C:\ProgramData\MSI\One Dragon Center\Data folder...

6.7AI score0.00629EPSS
SaveExploits0References1
Rows per page
Query Builder