Lucene search
+L

3712 matches found

Positive Technologies
Positive Technologies
•added 2023/09/12 12:00 a.m.•20 views

PT-2023-27041 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...

9.8CVSS9.7AI score0.02092EPSS
SaveExploits0References8
CVE
CVE
•added 2023/09/12 12:00 a.m.•70 views

CVE-2023-39637

CVE-2023-39637 affects D-Link DIR-816 A2 firmware 1.10 B05. The vulnerability is a command injection via the vulnerable component /goform/Diagnosis . CVSS-3.1 base metrics indicate network access, no privileges required, no user interaction, and high impact on confidentiality, integrity, and avai...

9.8CVSS9.7AI score0.02092EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2023/09/12 12:00 a.m.•18 views

D-Link DIR-816 A2 Command Injection Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from the component /goform/Diagnosis containing command injection...

9.8CVSS7.1AI score0.02092EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/09/07 12:00 a.m.•4 views

PT-2023-27710

Name of the Vulnerable Software and Affected Versions Tenda AC9 version V3.0BR V15.03.06.42 multi TD01 Description A stack overflow issue was discovered via the firewall value parameter at the "/goform/SetFirewallCfg" API endpoint. Recommendations For Tenda AC9 version V3.0BR V15.03.06.42 multi...

9.8CVSS5.8AI score0.00838EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•3 views

CVE-2021-40546: Improper Resource Shutdown or Release

Tenda AC6 USAC6V4.0RTLV02.03.01.26cn.bin allows attackers who have the administrator password to cause a denial of service device crash via a long string in the wifiPwd5G parameter to /goform/setWifi...

4.9CVSS5.8AI score0.0073EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/08/31 12:00 a.m.•16 views

The vulnerability of the /goform/SetIpMacBind component in the Tenda AC8 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/SetIpMacBind component in Tenda AC8 software lies in the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

10CVSS8.3AI score0.0124EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2023/08/30 1:15 p.m.•10 views

CVE-2023-41558

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...

9.8CVSS7.4AI score0.00838EPSS
SaveExploits1References2
NVD
NVD
•added 2023/08/30 1:15 p.m.•30 views

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

9.8CVSS9.8AI score0.00838EPSS
SaveExploits1References1
OSV
OSV
•added 2023/08/30 1:15 p.m.•20 views

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

9.8CVSS5.9AI score0.00838EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/30 1:15 p.m.•12 views

CVE-2023-41556

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind...

9.8CVSS7.4AI score0.01121EPSS
SaveExploits1References2
Prion
Prion
•added 2023/08/30 1:15 p.m.•24 views

Stack overflow

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat...

7.5CVSS9.7AI score0.00838EPSS
SaveExploits1References1Affected Software2
Prion
Prion
•added 2023/08/30 1:15 p.m.•28 views

Stack overflow

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

7.5CVSS9.6AI score0.00853EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•16 views

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a home wireless router launched by Tenda brand, which is mainly positioned as a wall-penetrating enhanced dual-band gigabit device for home network coverage needs. The Tenda AC7 suffers from a stack buffer overflow vulnerability, which originates from the security5g parameter of...

9.8CVSS9.2AI score0.00838EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•16 views

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a dual-band wireless router with a strong signal and stable performance for large, multi-bedroom users. The Tenda AC7 suffers from a stack buffer overflow vulnerability that originates from the timeZone parameter of /goform/SetSysTimeCfg failing to correctly validate the length a...

9.8CVSS9.2AI score0.00838EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•16 views

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the mitInterface parameter of /goform/addressNat...

9.8CVSS8.8AI score0.00838EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•4 views

CVE-2023-41554: Out-of-bounds Write

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

9.8CVSS8.4AI score0.00838EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•5 views

CVE-2023-41552: Out-of-bounds Write

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

9.8CVSS8.4AI score0.00838EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/30 12:00 a.m.•7 views

PT-2023-27977

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 1.0 V15.03.06.44 Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC5 version 1.0RTL V15.03.06.28 Description A stack overflow issue was discovered via the page parameter at the "/goform/NatStaticSetting" API endpoint. This iss...

9.8CVSS5.8AI score0.00838EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•21 views

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC9, which is caused by a buffer overflow in the list parameter of /goform/SetStaticRouteCfg...

9.8CVSS8.8AI score0.00838EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/08/30 12:00 a.m.•15 views

CVE-2023-41561

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg...

7.9AI score0.00838EPSS
SaveExploits1References1
Rows per page
Query Builder