119 matches found
PT-2025-35493
Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20211108.1423 Description: A buffer overflow issue exists in the sub 418030 function of the /boafrm/formParentControl file. Manipulation of the submit-url argument can trigger this issue, potentially allowing for...
CVE-2025-9605
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...
CVE-2025-57215
Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function getparentControllistInfo...
CVE-2025-57215
Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function getparentControllistInfo...
CVE-2025-9523
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...
CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...
PT-2025-34859
Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack-based buffer overflow vulnerability exists in the GetParentControlInfo function of the /goform/GetParentControlInfo file. Manipulation of the mac argument can trigger the vulnerability,...
CVE-2025-55605
Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter...
PT-2025-35174
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.16 Tenda AC23 version 16.03.08.16 Description: A stack-based buffer overflow vulnerability exists in the GetParentControlInfo function of the /goform/GetParentControlInfo file in Tenda AC21 and AC23 routers...
CVE-2025-8940
A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to t...
CVE-2025-8940
CVE-2025-8940 affects Tenda AC20 routers up to firmware version 16.03.08.12. The vulnerability is a buffer overflow in the strcpy usage of /goform/saveParentControlInfo, triggered by manipulating the Time parameter. It enables remote exploitation and has publicly disclosed exploits. Several sourc...
CVE-2025-8940 Tenda AC20 saveParentControlInfo strcpy buffer overflow
A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to t...
Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17342)
The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a heap buffer overflow in the mac parameter in /goform/GetParentControlInfo, which can be exploited by an attacker to crash the system by corrupting the memory...
CVE-2025-51087
Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow...
CVE-2025-51089
Tenda AC8V4 V16.03.34.06 was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument mac leads to heap-based buffer overflow...
TOTOLINK A3002RU 安全漏洞
TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU suffers from a buffer overflow vulnerability, which originates from the failure of the parameter submit-url in the file /boafrm/formParentControl to correctly validate the length and size of...
CVE-2025-6824
A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible ...
CVE-2023-46553
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl...