Lucene search
K

27 matches found

Cvelist
Cvelist
added 2026/05/24 11:45 p.m.17 views

CVE-2026-9407 Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. Affected by this vulnerability is the function setFirewallType of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument firewallType leads to os command injection...

10CVSS0.01254EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/05/24 11:45 p.m.7 views

CVE-2026-9407 Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. Affected by this vulnerability is the function setFirewallType of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument firewallType leads to os command injection...

10CVSS6.9AI score0.01254EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/24 11:45 p.m.8 views

CVE-2026-9407

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. Affected by this vulnerability is the function setFirewallType of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument firewallType leads to os command injection...

10CVSS6.9AI score0.01254EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/06 11:0 p.m.1 views

CVE-2026-5691 Totolink A7100RU cstecgi.cgi setFirewallType os command injection

A vulnerability has been found in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setFirewallType of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument firewallType leads to os command injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS5.6AI score0.04736EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-19883

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00399EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/12 1:31 p.m.5 views

CVE-2025-8810

A vulnerability classified as critical was found in Tenda AC20 16.03.08.05. Affected by this vulnerability is the function strcpy of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit...

9CVSS7.4AI score0.00677EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/08/02 12:0 a.m.5 views

PT-2025-32484 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.05 Description: A critical vulnerability exists in Tenda AC20 version 16.03.08.05. The strcpy function within the /goform/SetFirewallCfg file is susceptible to a stack-based buffer overflow. This occurs through the...

9CVSS7.2AI score0.00677EPSS
Exploits1References13
OSV
OSV
added 2025/03/13 2:15 p.m.1 views

CVE-2025-29358

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

7.5CVSS5.8AI score0.00214EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.1 views

Tenda RX3 安全漏洞

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a buffer overflow vulnerability, which originates from the firewallEn parameter in /goform/SetFirewallCfg that fails ...

7.5CVSS7.3AI score0.00214EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/03/20 12:0 a.m.1 views

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC10U version 15.03.06.49, which is caused by a stack-based buffer overflow in the firewallEn parameter of the formSetFirewallCfg function of /goform/SetFirewallCfg...

9CVSS7.5AI score0.00783EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/07 3:15 p.m.1 views

CVE-2023-40942

Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...

9.8CVSS5.8AI score0.00151EPSS
Exploits1References2
OSV
OSV
added 2023/09/07 3:15 p.m.1 views

CVE-2023-40942

Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...

9.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2023/08/30 1:15 p.m.1 views

CVE-2023-41560

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

9.8CVSS5.9AI score
Exploits0References1
CNVD
CNVD
added 2023/08/28 12:0 a.m.1 views

Tenda AC8 /goform/SetFirewallCfg Buffer Overflow Vulnerability

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

9.8CVSS8.3AI score0.00151EPSS
Exploits1References1
OSV
OSV
added 2023/08/24 6:15 p.m.1 views

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

9.8CVSS5.9AI score
Exploits0References1
CNNVD
CNNVD
added 2023/08/24 12:0 a.m.1 views

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

9.8CVSS8.2AI score0.00151EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/08/04 6:15 p.m.0 views

CVE-2023-33377

Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices...

9.8CVSS6.1AI score0.0038EPSS
Exploits0References3
OSV
OSV
added 2023/08/04 6:15 p.m.2 views

CVE-2023-33377

Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices...

9.8CVSS6AI score0.0038EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/02 8:15 p.m.1 views

CVE-2023-33673

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function...

9.8CVSS7.4AI score0.00138EPSS
Exploits1References3
OSV
OSV
added 2022/12/02 6:15 p.m.2 views

CVE-2022-45650

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function...

7.5CVSS6.2AI score
Exploits0References1
Rows per page
Query Builder