CVE-2023-51953

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

PT-2024-14343 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.stb.port parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround, consider restrictin...

CVE-2023-51958

CVE-2023-51958 affects Tenda AX1803 v1.0.0.1, with a stack overflow discovered in the formGetIptv() function caused by handling of the iptv.stb.port parameter. Multiple sources describe potential outcomes as arbitrary code execution or a denial-of-service condition. The Red Hat, CNVD, CNNVD, and ...

PT-2024-14352 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.port parameter in the getIptvInfo function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

CVE-2023-51970

The CVE-2023-51970 entry concerns Tenda AX1803 v1.0.0.1, where a stack overflow can be triggered via the iptv.stb.mode parameter in the formSetIptv function. Multiple sources (NVD, Red Hat, CNVD/CNNVD, CVE records) describe the vulnerability as a buffer/stack overflow in the input validation path...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.stb.mode parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited by an...

PT-2024-14342 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.mode parameter in the formGetIptv function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

CVE-2023-51960

CVE-2023-51960 affects Tenda AX1803 v1.0.0.1, with a stack overflow triggered by the iptv.city.vlan parameter in the formGetIptv function. Reported impact is code execution or crash (as described by multiple sources), with CVSSv3.1 metrics indicating a CRITICAL severity (AV:N/AC:L/PR:N/UI:N/S:U/C...

CVE-2023-51969

CVE-2023-51969 affects Tenda AX1803 router (v1.0.0.1). The connected sources describe a stack overflow in the getIptvInfo function triggered via the iptv.city.vlan parameter. Root cause: a stack overflow vulnerability in the handling of that parameter. Impact stated across sources is high/confide...

CVE-2023-51958

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv...

PT-2024-14356 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that occurs in the getIptvInfo function. This overflow is triggered via the adv.iptv.stbpvid parameter. Recommendations: For Tenda AX1803 version 1.0.0.1,...

PT-2024-14345 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.city.vlan parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround,...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.city.vlan parameter of the formGetIptv method failing to correctly validate the length and size of the input data, and can be exploite...

PT-2024-14349 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.port parameter in the setIptvInfo function. Recommendations: For Tenda AX1803 version 1.0.0.1, avoid using the iptv.stb.port...

CVE-2023-51956

CVE-2023-51956 affects Tenda AX1803 with firmware v1.0.0.1. The root cause is a stack overflow in the formSetIptv() function via the iptv.city.vlan parameter due to improper input length validation. Impacts cited in multiple sources include potential arbitrary code execution or denial of service,...

CVE-2023-51967

CVE-2023-51967 affects Tenda AX1803 (v1.0.0.1); a stack overflow is triggered in getIptvInfo via the iptv.stb.port parameter. The issue has a CVSSv3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, LOW attack complexity, and no privileges required; impact to confidentiality, integrity, ...

CVE-2023-7026

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/webuploadtemplate.html. The manipulation of the argument file leads to unrestricted upload. The attack may be...

CVE-2023-7026

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/webuploadtemplate.html. The manipulation of the argument file leads to unrestricted upload. The attack may be...

Out-of-bounds

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/webuploadtemplate.html. The manipulation of the argument file leads to unrestricted upload. The attack may be...

CVE-2023-7026 Lightxun IPTV Gateway web_upload_template.html unrestricted upload

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/webuploadtemplate.html. The manipulation of the argument file leads to unrestricted upload. The attack may be...