12485 matches found
Tenda AC6 security vulnerabilities
The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version 15.03.06.50, which originates from the parameter shareSpeed in the file /goform/WifiGuestSet that fails to correctly validate the length and size of the input data, and c...
ncc2 for D-Link DIR-820L Unauthorized Access
The vulnerability of the ncc2 microprogramming software for D-Link DIR-820L routers is related to deficiencies in access control when processing the /getset.ccp endpoint. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protect...
TOTOLINK A3300R security vulnerabilities
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a stack buffer overflow vulnerability that originates from the parameter recHour of the setScheduleCfg function o...
PT-2025-43879
Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.50 Description A stack-based buffer overflow issue exists in the HTTP Request Handler component of Tenda AC6 version 15.03.06.50. The issue is related to the processing of the /goform/WifiGuestSet file. Manipulation ...
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38659)
enic: Validate length of nl attributes in enicsetvfport enicsetvfport assumes that the nl attribute IFLAPORTPROFILE is of length PORTPROFILEMAX and that the nl attributes IFLAPORTINSTANCEUUID, IFLAPORTHOSTUUID are of length PORTUUIDMAX. These attributes are validated in the function dosetlink in...
Siemens SIMATIC Devices Race Condition (CVE-2024-24858)
A race condition was found in the Linux kernel's net/bluetooth in conn,advmin,maxintervalset function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service. This plugin only works with Tenable.ot. Please visit...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use of Uninitialized Resource (CVE-2024-49900)
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using uninit-value: ===================================================== BUG: KMSAN: uninit-value in lzo1x1docompress+0x19f9/0x2510...
Siemens SIMATIC Devices Improper Locking (CVE-2024-26643)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: mark set as dead when unbinding anonymous set with timeout This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...
CVE-2025-60553
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWANWizard52...
CVE-2025-60563
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr...
CVE-2025-60559
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter...
CVE-2025-60557
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasyWizard...
CVE-2025-60571
D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS...
CVE-2025-60569
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...
Tenda AC6 SetClientState function buffer overflow vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version 15.03.06.50, which is caused by the SetClientState function failing to properly validate the length of the input data, and can be exploited by an attacker to execute...
CVE-2025-60564
The D-Link DIR600L wireless router, specifically running Ax FW116WWb01 microprogramming, is vulnerable to a stack-based buffer overflow (CWE-121) within the formSetLog() function. The root cause is the failure to validate the length of input data when processing the curTime parameter, allowing fo...
CVE-2025-60556
The D-Link DIR600L wireless router, specifically running firmware version FW116WWb01 , is vulnerable to a stack-based buffer overflow (CWE-121). The issue resides in the formSetWizard1 function, which fails to properly validate the length of input data when processing the curTime parameter. A rem...
TOTOLINK N600R setWiFiBasicConfig function stack buffer overflow vulnerability
TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, which supports 2.4GHz and 5GHz dual-band concurrency with a maximum wireless transmission rate of 300Mbps. The TOTOLINK N600R suffers from a stack buffer overflow vulnerability, which stems from the failure o...
Tenda AC6 SetSpeedWan Function Buffer Overflow Vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version 15.03.06.50, which is caused by the speeddir parameter in the SetSpeedWan function failing to properly validate the length of the input data, and can be exploited by an...
