Lucene search
+L

355 matches found

Prion
Prion
added 2023/08/30 1:15 p.m.25 views

Stack overflow

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo...

7.5CVSS9.7AI score0.00701EPSS
Exploits1References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/08/30 12:0 a.m.14 views

CVE-2023-41563

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo...

7.9AI score0.00701EPSS
Exploits1References1
CNVD
CNVD
added 2023/08/28 12:0 a.m.4 views

Tenda AC8 /goform/GetParentControlInfo Buffer Overflow Vulnerability

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

9.8CVSS8.3AI score0.00701EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/08/25 12:0 a.m.6 views

PT-2023-4719 · Tenda · Tenda Ac9 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC9 versions V3.0 V15.03.06.42 multi Tenda AC5 versions US AC5V1.0RTL V15.03.06.28 Description: The issue is related to a stack overflow in the GetParentControlInfo function of Tenda AC9 and Tenda AC5 router software. This occurs when t...

9.8CVSS9.6AI score0.00701EPSS
Exploits1References6
OSV
OSV
added 2023/08/24 6:15 p.m.4 views

CVE-2023-40897

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo...

9.8CVSS5.9AI score0.00701EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/15 12:0 a.m.5 views

COMFAST CF-XR11 命令注入漏洞

The COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version 2.7.2, which can be exploited to execute arbitrary code via the ifname and mac parameters in the sub410074 function of bin/webmgnt...

9.8CVSS8.9AI score0.01081EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.12 views

The vulnerability of the formWriteFacMac function in the Tenda AC10 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda AC10 router software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the mac parameter...

10CVSS8.2AI score0.02446EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2023/07/11 12:0 a.m.29 views

Tenda AC10 Command Execution Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC10 version v15.03.06.26. The vulnerability stems from the application failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

9.8CVSS7.4AI score0.02446EPSS
Exploits1References1
OSV
OSV
added 2023/07/07 2:15 p.m.3 views

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS5.8AI score0.02446EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/07/07 2:15 p.m.10 views

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS7.4AI score0.02446EPSS
Exploits1References2
Prion
Prion
added 2023/07/07 2:15 p.m.23 views

Command injection

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

7.5CVSS9.8AI score0.02446EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/07/07 12:0 a.m.30 views

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

10AI score0.02446EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/07/07 12:0 a.m.15 views

CVE-2023-37144

Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

8.2AI score0.02446EPSS
Exploits1References1
NVD
NVD
added 2023/06/12 8:15 p.m.17 views

CVE-2023-34942

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

7.5CVSS7.7AI score0.00744EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/06/12 8:15 p.m.11 views

CVE-2023-34942

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

7.5CVSS5.8AI score0.00744EPSS
Exploits1References2
CVE
CVE
added 2023/06/12 12:0 a.m.149 views

CVE-2023-34942

Summary: CVE-2023-34942 affects the Asus RT-N10LX router (v2.0.0.39). A stack overflow is triggered via the mac parameter at the /start-apply.html endpoint. The vulnerability is tied to devices that are no longer supported by the maintainer. Impact and context: The issue is described as a stack o...

7.5CVSS7.7AI score0.00744EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/06/12 12:0 a.m.6 views

ASUS RT-N10LX 缓冲区错误漏洞

ASUS RT-N10LX is a router from Asus China. A security vulnerability exists in ASUS RT-N10LX Router version v2.0.0.39, which originates from a discovery containing a stack overflow vulnerability via the mac parameter in /start-apply.html...

7.5CVSS7.4AI score0.00744EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/06/12 12:0 a.m.25 views

CVE-2023-34942

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

7.9AI score0.00744EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/06/12 12:0 a.m.6 views

PT-2023-25070 · Asus · Asus Rt-N10Lx Router

Name of the Vulnerable Software and Affected Versions: Asus RT-N10LX Router version 2.0.0.39 Description: A stack overflow issue was discovered via the mac parameter at the "/start-apply.html" API endpoint. This issue only affects products that are no longer supported by the maintainer...

7.5CVSS7.3AI score0.00744EPSS
Exploits1References3
CNVD
CNVD
added 2023/05/18 12:0 a.m.91 views

Tenda AC5 Code Execution Vulnerability

Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this...

9.8CVSS7.8AI score0.01998EPSS
Exploits1References1
Rows per page
Query Builder