Lucene search
K

100 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.0 views

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC18 router’s software lies in the fact that the operation may escape out of the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise th...

9CVSS0.00136EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/03/20 4:15 p.m.1 views

CVE-2024-2703

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit h...

8.8CVSS6.2AI score0.00478EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/03/15 8:31 a.m.16 views

CVE-2024-2487 Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated...

9CVSS8.8AI score0.00136EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/03/15 8:31 a.m.17 views

CVE-2024-2487 Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated...

9CVSS8.9AI score0.00136EPSS
Exploits1References3
OSV
OSV
added 2024/02/22 11:15 p.m.1 views

CVE-2024-25753

Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function...

8.8CVSS6.2AI score0.00994EPSS
Exploits0References1
Prion
Prion
added 2024/02/22 11:15 p.m.12 views

Stack overflow

Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function...

8.5AI score0.00994EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/02/22 12:0 a.m.1 views

Tenda AC9 Security Vulnerability

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC9 v.3.0 firmware v.15.03.06.42multi version, which stems from the presence of a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the...

8.8CVSS8.3AI score0.00994EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/22 12:0 a.m.10 views

CVE-2024-25753

Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function...

7.9AI score0.00994EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/01/31 12:0 a.m.2 views

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

5.8CVSS0.00218EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/01/26 2:15 p.m.1 views

CVE-2024-0923

A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49multiTDE01. Affected by this issue is the function formSetDeviceName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has bee...

9.8CVSS6.2AI score
Exploits0References3
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.2 views

Tenda AC10 安全漏洞

Tenda AC10U is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC10U formSetDeviceName function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

9.8CVSS8.2AI score0.00218EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/26 12:0 a.m.4 views

PT-2024-1368 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: A critical issue has been found in the function formSetDeviceName, which is related to a stack-based buffer overflow due to the manipulation of the argument devName. This can be exploit...

9.8CVSS7.5AI score0.00218EPSS
Exploits1References8
Prion
Prion
added 2024/01/09 9:15 a.m.18 views

Stack overflow

Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function...

7.5CVSS8.2AI score0.00121EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.2 views

PT-2024-13945 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: A stack overflow issue was discovered via the devName parameter in the formSetDeviceName function. This issue can be exploited, potentially allowing unauthorized access or control. Recommendations: F...

9.8CVSS9.3AI score0.00121EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.1 views

Tenda A18 安全漏洞

Tenda A18 is an AC1200 dual-band Wi-Fi repeater from China's Tenda. A buffer overflow vulnerability exists in Tenda A18 version v15.13.07.09, which originates from the devName parameter in the formSetDeviceName function failing to correctly validate the length of the input data, and can be...

9.8CVSS8.2AI score0.00121EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/01/09 12:0 a.m.4 views

CVE-2023-50585

Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function...

9.8AI score0.00121EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.1 views

Tenda AX1803 Security Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in Tenda AX1803 v.1.0.0.1, which originates from a stack overflow vulnerability in the devName parameter of the function formSetDeviceName...

7.5CVSS7.3AI score0.00084EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/11/27 12:0 a.m.2 views

PT-2023-31038 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the devName parameter in the formSetDeviceName function. Recommendations: For Tenda AX1803 version 1.0.0.1, avoid using the devName paramete...

7.5CVSS7.5AI score0.00084EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/11/27 12:0 a.m.17 views

CVE-2023-49047

Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName...

7.9AI score0.00084EPSS
Exploits1References1
CNVD
CNVD
added 2023/09/05 12:0 a.m.2 views

Tenda AC8 formSetDeviceName function stack buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management features. The Tenda AC8 suffers from a stack buffer overflow vulnerability that originates from a boundary error in the function...

10CVSS8.3AI score0.00477EPSS
Exploits1References1
Rows per page
Query Builder