Tenda i3 wireless access point formSetCfm() Code Execution

The vulnerability of the formSetCfm function /goform/setcfm of the Tenda i3 wireless access point software is related to the execution of an operation outside the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow a malicious actor to execute...

CVE-2026-4904

A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...

Tenda O1 security vulnerability

Tenda O1 is a dedicated bridge for elevator monitoring from Tenda China. Tenda O1 suffers from a buffer overflow vulnerability, which originates from the funcpara1 parameter of the formSetCfm function in the /goform/setcfm file that fails to correctly validate the length and size of the input dat...

CVE-2024-3879

A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25633. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2020-13392

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...