CVE-2022-25437

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...

CVE-2022-25456

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the security5g parameter in the WifiBasicSet function...

CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25457

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25456

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the security5g parameter in the WifiBasicSet function...

CVE-2022-25434

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function...

CVE-2022-25454

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function...

CVE-2022-25439

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function...

CVE-2022-25445

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...

CVE-2022-25450

Tenda AC6 V15.03.05.09multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...

CVE-2022-25450

Tenda AC6 V15.03.05.09multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...

CVE-2022-25445

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...

CVE-2022-25454

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function...

CVE-2022-25457

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

Prototype Pollution

set-in is vulnerable to prototype pollution. An attacker is able to inject malicious property types via setIn method and merge object prototypes into it, resulting in prototype pollution vulnerability...

Prototype Pollution

libnested is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the set function in the index.js and modify attributes such as proto, constructor, and prototype...

Prototype Pollution in libnested

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

Prototype Pollution in set-in

The package set-in before 2.0.3 is vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273...

GHSA-6956-83FG-5WC5 Prototype Pollution in set-in

The package set-in before 2.0.3 is vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273...

PT-2022-17295 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A stack overflow issue was discovered via the ntpserver parameter in the SetSysTimeCfg function. Recommendations: For Tenda AC9 version 15.03.2.21, consider restricting access to the SetSysTimeCfg...