3717 matches found
CVE-2024-22543
An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...
Linksys E1700 Security Breach
Linksys E1700 is a wireless router from Linksys USA. A security vulnerability exists in Linksys E1700 version 1.0.04. An attacker can exploit the vulnerability to escalate privileges via a specially crafted GET request to the /goform/ URI or via the ExportSettings function...
CVE-2024-22543: Insufficient Session Expiration
An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...
PT-2024-19476 · Linksys · Linksys Router E1700
Name of the Vulnerable Software and Affected Versions: Linksys Router E1700 version 1.0.04 build 3 Description: An issue was discovered in the Linksys Router E1700, allowing authenticated attackers to escalate privileges. This can be achieved via a crafted GET request to the "/goform/" URI or...
AC6 Stack Buffer Overflow Vulnerability in Shenzhen Jixiang Tengda Technology Co.
Shenzhen Jixiang Tenda Technology Co., Ltd AC6 is a dual-band wireless router from Tenda Tenda, supporting IPv4 and IPv6 protocols, adopting 802.11ac/n wireless standard and providing 1167Mbps wireless transmission rate. Ltd. AC6 suffers from a stack buffer overflow vulnerability that originates...
PT-2024-12027
Name of the Vulnerable Software and Affected Versions Tenda AC6 version US AC6V5.0re V03.03.02.01 cn TDC01 Description A stack overflow issue allows attackers to run arbitrary commands via a crafted POST request to "/goform/PowerSaveSet". This can be exploited by sending a specifically designed...
PT-2024-12028
Name of the Vulnerable Software and Affected Versions Tenda AC21 version US AC21V1.0re V16.03.08.15 cn TDC01 Description A stack overflow issue allows attackers to run arbitrary commands via a crafted POST request to the "/goform/openSchedWifi" API endpoint. This enables potential exploitation fo...
CVE-2023-24333: Improper Control of Generation of Code
A stack overflow vulnerability in Tenda AC21 with firmware version USAC21V1.0reV16.03.08.15cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi...
CVE-2023-24332: Stack-based Buffer Overflow
A stack overflow vulnerability in Tenda AC6 with firmware version USAC6V5.0reV03.03.02.01cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet...
CVE-2024-0994
A vulnerability was found in Tenda W6 1.0.0.94122. It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be...
CVE-2024-0992
CVE-2024-0992 affects Tenda i6 1.0.0.9(3857) in the httpd component via the formwrlSSIDset function at /goform/wifiSSIDset. The index argument manipulation leads to a stack-based buffer overflow, enabling remote exploitation (attack vector: network; impact: high confidentiality, integrity, and av...
Tenda i9 Security Vulnerability
The Tenda i9 is a ceiling-mountable wireless access point from Tenda China. A security vulnerability exists in Tenda i9 version 1.0.0.9, which originates from a stack-based buffer overflow in the funcpara1 parameter of the formSetCfm function in /goform/setcfm...
Tenda W6 Security Vulnerability
Tenda W6 is a wireless WiFi AP access point router from Tenda, a Chinese company. A security vulnerability exists in Tenda W6 version 1.0.0.9, which is caused by a stack-based buffer overflow in the index parameter of the formwrlSSIDset function of /goform/wifiSSIDset...
PT-2024-1315
Name of the Vulnerable Software and Affected Versions Tenda i6 version 1.0.0.93857 Description A critical issue has been found in the formSetCfm function of the httpd component, specifically in the file /goform/setcfm. The manipulation of the funcpara1 argument leads to a stack-based buffer...
PT-2024-1309
Name of the Vulnerable Software and Affected Versions Tenda W6 version 1.0.0.94122 Description A critical issue affects the function formwrlSSIDset of the httpd component, specifically in the file /goform/wifiSSIDset. The manipulation of the argument index leads to a stack-based buffer overflow...
VulnCheck KEV: CVE-2020-35713
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...
CVE-2024-0533
A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument devName leads to stack-based buffer overflow. The...
Tenda A15 安全漏洞
Tenda A15 is a WiFi extender from Tenda China. A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the wpapskcrypto24g parameter of the /goform/WifiExtraSet file that fails to correctly validate the length of the input data, and can be exploited by a...
PT-2024-1453
Name of the Vulnerable Software and Affected Versions Tenda A15 version 15.13.07.13 Description A critical issue affects the Web-based Management Interface of the Tenda A15, specifically the file /goform/SetOnlineDevName. The manipulation of the devName argument leads to a stack-based buffer...