CVE-2022-25461: Out-of-bounds Write

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function...

CVE-2021-46394

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

PT-2022-12689

Name of the Vulnerable Software and Affected Versions Tenda-AX3 router version V16.03.12.10 CN Description The issue is related to a stack buffer overflow vulnerability in the formSetPPTPServer function. The v13 variable is directly retrieved from the HTTP request parameter startIp without any...

PT-2022-12688

Name of the Vulnerable Software and Affected Versions Tenda-AX3 router version V16.03.12.10 CN Description The issue is related to a stack buffer overflow in the formSetPPTPServer function. The v10 variable is directly retrieved from the HTTP request parameter startIp without any security checks,...