The vulnerability of the SetOnlineDevName() function in the microprogramming software for wireless Wi-Fi routers Tenda AX12 allows a hacker to execute arbitrary commands.

The vulnerability of the SetOnlineDevName function in the Tenda AX12 wireless Wi-Fi router software lies in the lack of measures taken to sanitize input data during the processing of the mac parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...

CVE-2023-49431

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

Command injection

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

Tenda AX12 安全漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A command execution vulnerability exists in Tenda AX12 version V22.03.01.46, which stems from the mac parameter of /goform/SetOnlineDevName failing to correctly filter constructed command special characters, commands, etc...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which stems from the failure of the "mac" parameter of /goform/SetOnlineDevName to properly filter constructor special characters, commands, etc. This vulnerability can be...

CVE-2022-45781

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...

CVE-2022-45781

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...

Buffer overflow

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...

CVE-2022-45781

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.12994 and earlier versions, which stems from the program's failure to correctly validate the length and size of input data, and can be exploited by an attacker to run...

CVE-2023-34570

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...

Stack overflow

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...

PT-2023-24928 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the devName parameter at the "/goform/SetOnlineDevName" API endpoint. This issue affects the Tenda AC10 v4 router. Recommendations: For...

Tenda AC10 缓冲区错误漏洞

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn version, which stems from a discovery containing a stack overflow via the devName parameter of /goform/SetOnlineDevName...

CVE-2023-34570

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...