The vulnerability of the formSetCfm() function (/goform/setcfm) in the Tenda i3 wireless access point software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function /goform/setcfm of the Tenda i3 wireless access point software is related to the execution of an operation outside the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the fromSetCfm() function in Tenda F456 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetCfm function in Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing parameters funcname and funcpara1. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...

CVE-2026-7057

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published a...

CVE-2026-7057: Buffer Copy without Checking Size of Input

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published a...

Tenda F456 缓冲区错误漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of the funcname/funcpara1 parameter in the goform/setcfm file within the httpd component, which ma...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221: Out-of-bounds Write

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

PT-2026-31339

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 multi Description A buffer overflow exists in the formSetCfm function. This issue can be triggered through the funcname, funcpara1, and funcpara2 parameters. Recommendations At the moment, there is no information...

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router produced by the Chinese company Tenda. The Tenda AC6 15.03.05.16multi version has a security vulnerability. This vulnerability stems from the improper handling of the funcname, funcpara1, and funcpara2 parameters by the formSetCfm function, which may lead to a buffe...

CVE-2025-52221

CVE-2025-52221 affects Tenda AC6 15.03.05.16_multi. The formSetCfm function is vulnerable to a buffer overflow when abusing funcname, funcpara1, and funcpara2 parameters. NVD records a CVSSv3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction; c...

EUVD-2026-16811

A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has...

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router produced by the Chinese company Tenda. Version 15.03.05.19 of the Tenda AC15 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/setcfm, specifically funcpara1. It may lead to a stack-based buffer...

CVE-2026-4975: Stack-based Buffer Overflow

A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has...

Tenda AC5 安全漏洞

Tenda AC5 is a wireless router produced by the Chinese company Tenda. Version 15.03.06.47 of Tenda AC5 contains a security vulnerability. This vulnerability stems from improper handling of parameters in the file/goform/setcfm, specifically funcpara1, which may lead to a stack buffer overflow...

CVE-2026-4904

A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...

PT-2026-28667

Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47 Description A flaw exists in the Tenda AC5 version 15.03.06.47. This issue is located within the formSetCfm function of the /goform/setcfm file, part of the POST Request Handler component. Manipulation of the...

CVE-2026-3972: Stack-based Buffer Overflow

A vulnerability was found in Tenda W3 1.0.0.32204. Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of the argument funcpara1 results in stack-based buffer overflow. The attack can only be performed from the local network...