80 matches found
CVE-2024-0924
A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49multiTDE01. This affects the function formSetPPTPServer. The manipulation of the argument startIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...
PT-2024-1371 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: A critical vulnerability was found in the Tenda AC10U, affecting the function formSetPPTPServer. The manipulation of the startIp argument leads to a stack-based buffer overflow. This...
CVE-2024-0924: Stack-based Buffer Overflow
A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49multiTDE01. This affects the function formSetPPTPServer. The manipulation of the argument startIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...
CVE-2022-45649
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...
CVE-2022-45652
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function...
CVE-2022-45649
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...
Buffer overflow
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...
Buffer overflow
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function...
CVE-2022-45652: Buffer Copy without Checking Size of Input
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function...
CVE-2022-45649
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...
CVE-2022-45649
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...
CVE-2022-45649: Buffer Copy without Checking Size of Input
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...
CVE-2022-45652
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function...
CVE-2022-45649
Consolidated from multiple sources, CVE-2022-45649 affects Tenda AC6V1.0 (V15.03.05.19). The vulnerability is a buffer overflow in the formSetPPTPServer function triggered via the endIp parameter, with CVSSv3.1 metrics showing an attacker‑network, low complexity, no privileges, no user interactio...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC6V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability via the startIp parameter in the formSetPPTPServer function...
CVE-2022-45652
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC6V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability via the endIp parameter in the formSetPPTPServer function...
CVE-2022-45652
The Tenda AC6V1.0 wireless router, specifically version V15.03.05.19 , is vulnerable to a buffer overflow (CWE-120). The flaw exists in the formSetPPTPServer function when processing the startIp parameter. This vulnerability could allow for potential exploitation by an attacker. As of the current...
Tenda AC15 formSetPPTPServer function buffer overflow vulnerability
The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 firmware version V15.03.05.18, which is caused by the formSetPPTPServer function not checking the length of the input data, and can be exploited by an attacker to launch a...