CVE-2025-13446: Stack-based Buffer Overflow

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

PT-2025-47551

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

CVE-2025-51085: Stack-based Buffer Overflow

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...

CVE-2025-6887: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2025-29360: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2023-40898: Out-of-bounds Write

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...

CVE-2023-24212

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...

CVE-2022-43028: Out-of-bounds Write

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...

CVE-2022-43029: Out-of-bounds Write

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg...

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

EUVD-2022-38990

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

PT-2022-23288 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 cn Description: The issue is related to command injection via the "goform/SetSysTimeCfg" API endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated...

CVE-2022-36273: Improper Neutralization of Special Elements used in an OS Command

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to...

Tenda AC-10U 缓冲区错误漏洞

The Tenda AC-10U is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC-10U AC1200 router due to a boundary error when handling untrusted input. A remote attacker could execute arbitrary code via the timeZone parameter of goform/SetSysTimeCfg...

CVE-2020-22079: Out-of-bounds Write

Stack-based buffer overflow in Tenda AC-10U AC1200 Router USAC10UV1.0RTLV15.03.06.48multiTDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg...