CVE-2023-41561

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg...

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

CVE-2023-41557

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat...

CVE-2023-41554

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the ssid parameter of /goform/fastsettingwifiset...

CVE-2023-41562

CVE-2023-41562 affects Tenda routers: AC7 v1.0 (V15.03.06.44), AC9 v3.0 (V15.03.06.42_multi), and AC5 (US_AC5V1.0RTL_V15.03.06.28). The vulnerability is a stack overflow triggered by the time parameter in the /goform/PowerSaveSet API. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL)...

CVE-2023-41559: Out-of-bounds Write

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

CVE-2023-41554: Out-of-bounds Write

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

CVE-2023-41560: Out-of-bounds Write

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

CVE-2023-41555: Out-of-bounds Write

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security5g at url /goform/WifiBasicSet...

CVE-2023-41552: Out-of-bounds Write

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

CVE-2023-41553: Out-of-bounds Write

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg...

CVE-2023-41563: Out-of-bounds Write

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the time parameter of /goform/PowerSaveSet...

Tenda AC7 缓冲区错误漏洞

The Tenda AC7 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the mitInterface parameter of /goform/addressNat...

PT-2023-27970 · Tenda · Tenda Ac7 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Tenda AC9 version V15.03.06.42 multi Description: A stack overflow issue was discovered, which occurs via the ssid parameter at the "/goform/fast setting wifi set" API endpoint. Recommendations: For Tenda AC7...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the list parameter of /goform/SetIpMacBind...

CVE-2023-41557: Out-of-bounds Write

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat...

CVE-2023-41555

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security5g at url /goform/WifiBasicSet...

CVE-2023-41561

The CVE-2023-41561 issue affects Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28. A stack overflow is triggered via parameters startIp and endIp in the API endpoint /goform/SetPptpServerCfg. The connected documents confirm the affected products and the vulnerable parame...