Lucene search
+L

57 matches found

OSV
OSV
•added 2022/05/04 4:15 p.m.•14 views

CVE-2022-28556

Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow...

7.5CVSS7.3AI score0.01055EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/05/04 12:00 a.m.•16 views

PT-2022-19077 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.20 Description: The issue is related to a buffer overflow in the web interface, specifically in the "/goform/setpptpservercfg" API endpoint. The vulnerability arises from the handling of POST data, where the starti...

7.5CVSS7.6AI score0.01055EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/04 12:00 a.m.•1 views

CVE-2022-28556: Out-of-bounds Write

Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow...

7.5CVSS7.5AI score0.01055EPSS
SaveExploits1References2
OSV
OSV
•added 2022/03/18 9:15 p.m.•5 views

CVE-2022-25460

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

9.8CVSS7.4AI score
SaveExploits0References1
NVD
NVD
•added 2022/03/18 9:15 p.m.•34 views

CVE-2022-25460

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

10CVSS0.01692EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/18 9:15 p.m.•13 views

CVE-2022-25460

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

10CVSS7.2AI score0.01692EPSS
SaveExploits1References2
Prion
Prion
•added 2022/03/18 9:15 p.m.•31 views

Stack overflow

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

10CVSS9.6AI score0.01692EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/03/18 8:53 p.m.•120 views

CVE-2022-25460

CVE-2022-25460 affects the Tenda AC6 router, specifically v15.03.05.09_multi. A stack overflow exists in the SetPptpServerCfg function that can be triggered via the endip parameter, potentially allowing arbitrary command execution. Several connected sources (CNVD/CNNVD/Red Hat entry) describe the...

10CVSS9.6AI score0.01692EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/03/18 8:53 p.m.•44 views

CVE-2022-25460

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

9.9AI score0.01692EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/18 12:00 a.m.•3 views

CVE-2022-25460: Out-of-bounds Write

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function...

10CVSS8.4AI score0.01692EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/02/04 2:15 a.m.•9 views

CVE-2022-24159

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service DoS via the startIp and endIp parameters...

7.8CVSS7.2AI score0.01175EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/04 2:15 a.m.•21 views

CVE-2022-24159

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service DoS via the startIp and endIp parameters...

7.8CVSS0.01175EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/04 2:15 a.m.•14 views

CVE-2022-24159

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service DoS via the startIp and endIp parameters...

7.5CVSS5.9AI score0.01175EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/02/04 1:33 a.m.•40 views

CVE-2022-24159

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service DoS via the startIp and endIp parameters...

7.8AI score0.01175EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•0 views

CVE-2022-24159: Out-of-bounds Write

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service DoS via the startIp and endIp parameters...

7.8CVSS7.4AI score0.01175EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/02/03 12:00 a.m.•16 views

Tenda AX3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda, China.Tenda AX3 v16.03.12.10CN is vulnerable to a buffer error, which can be exploited by attackers to cause a denial of service DoS via the startIp and endIp parameters...

7.8CVSS6AI score0.01175EPSS
SaveExploits1References2
Prion
Prion
•added 2018/10/29 12:29 p.m.•31 views

Buffer overflow

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters for a pos...

7.8CVSS7.7AI score0.01141EPSS
SaveExploits1References1Affected Software5
Rows per page
Query Builder