144 matches found
CVE-2024-2558
A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...
Tenda AC18 Security Vulnerability
Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which is caused by a stack-based buffer overflow in the cmdinput parameter of the formexeCommand function of the /goform/execCommand file...
CVE-2024-2558: Stack-based Buffer Overflow
A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...
The vulnerability of the formexeCommand function in the wireless access point software Tenda W9 allows a intruder to execute arbitrary code.
The vulnerability of the formexeCommand function in the Tenda W9 wireless access point software exists due to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-51099
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...
CVE-2023-51099
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...
Command injection
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...
CVE-2023-51099
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...
PT-2023-8322 · Tenda · Tenda W9
Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue exists due to the lack of neutralization of special elements in the formexeCommand function. This could allow a remote attacker to execute arbitrary code. Recommendations:...
CVE-2023-51099: Improper Neutralization of Special Elements used in an OS Command
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...
Tenda W9 Security Vulnerability
Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which originates from a command injection vulnerability in the formexeCommand method...
CVE-2022-40107
Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...
CVE-2022-40100
Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...
Buffer overflow
Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...
Command injection
Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...
CVE-2022-40100
The CVE-2022-40100 entry concerns Tenda i9, affected in version 1.0.0.8(3828). A command injection vulnerability exists in the FormexeCommand function. The issue is rated with an NV D/CVSS3.1 base score 9.8 (CRITICAL) , with network access required and no authentication/UI interaction, and potent...
CVE-2022-40100
Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...
CVE-2022-40100
Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...
Tenda i9 缓冲区错误漏洞
Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formexeCommand function, which can be exploited by attackers to cause a denial of service via a specially crafted string...
PT-2022-25210 · Tenda · Tenda I9
Name of the Vulnerable Software and Affected Versions: Tenda i9 version 1.0.0.83828 Description: A buffer overflow issue was discovered, allowing attackers to cause a Denial of Service DoS via a crafted string. The issue is related to the formexeCommand function. Recommendations: For Tenda i9...