CVE-2022-24155

CVE-2022-24155 concerns Tenda AX3 devices (example: v16.03.12.10_CN) with a heap overflow in the function setSchedWifi , allowing a potential attacker to trigger a Denial of Service via the schedStartTime and schedEndTime parameters. The vulnerability is described as a heap overflow that can be e...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31386)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in multiple Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'schedStartTime' and 'schedEndTime' parameters to the...

CVE-2020-13389

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...