Lucene search
K

55 matches found

OSV
OSV
added 2026/02/21 9:16 p.m.3 views

CVE-2026-2886

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function setdevicename of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to t...

8.8CVSS6.3AI score0.00556EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/21 9:2 p.m.21 views

CVE-2026-2886 Tenda A21 SetOnlineDevName set_device_name stack-based overflow

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function setdevicename of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to t...

9CVSS0.00556EPSS
Exploits1References5
CVE
CVE
added 2026/02/21 9:2 p.m.10 views

CVE-2026-2886

The CVE-2026-2886 entry concerns Tenda A21 firmware 1.0.0.0, where the function SetOnlineDevName in /goform/SetOnlineDevName is vulnerable. Manipulating the devName argument causes a stack-based buffer overflow, enabling remote attack. The description notes that the exploit is publicly available....

9CVSS6.4AI score0.00556EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/02/21 12:0 a.m.5 views

Tenda A21 安全漏洞

The Tenda A21 is a wireless signal extender produced by the Chinese company Tenda. Version 1.0.0.0 of the Tenda A21 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/SetOnlineDevName, specifically the devName parameter, which may...

9CVSS7.7AI score0.00556EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/21 12:0 a.m.4 views

PT-2026-21395

Name of the Vulnerable Software and Affected Versions Tenda A21 version 1.0.0.0 Description A flaw exists in Tenda A21 version 1.0.0.0 related to the set device name function within the /goform/SetOnlineDevName file. Manipulation of the devName argument can trigger a stack-based buffer overflow,...

9CVSS8.2AI score0.00556EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2026/01/09 12:35 p.m.6 views

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

9.8CVSS7.9AI score0.02499EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-38625

Malicious code in bioql PyPI...

6.7CVSS6.7AI score0.00318EPSS
Exploits0References2
OSV
OSV
added 2025/01/10 3:15 p.m.4 views

CVE-2025-22946

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution...

9.8CVSS6.1AI score0.00882EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/10 12:0 a.m.4 views

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a stack overflow vulnerability that originates from a stack overflow issue found in /goform/SetOnlineDevName. An attacker can exploit this vulnerability to remotely execute arbitrary code...

9.8CVSS7.7AI score0.00882EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.4 views

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC6 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the mac and devName parameters. Exploiting this vulnerability could...

9CVSS8.3AI score0.01236EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/11/02 2:15 p.m.3 views

CVE-2024-10698

A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The...

9.8CVSS6.4AI score0.01236EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/11/02 1:31 p.m.17 views

CVE-2024-10698 Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The...

9CVSS9.6AI score0.01236EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/11/02 1:31 p.m.31 views

CVE-2024-10698 Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The...

9CVSS0.01236EPSS
Exploits1References5
OSV
OSV
added 2024/11/01 4:15 p.m.2 views

CVE-2024-10662

A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

8.8CVSS6.4AI score0.01228EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/11/01 4:0 p.m.16 views

CVE-2024-10662 Tenda AC15 SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

9CVSS8.9AI score0.01228EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/11/01 4:0 p.m.18 views

CVE-2024-10662 Tenda AC15 SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

9CVSS0.01228EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.3 views

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from Tenda. A stack overflow vulnerability exists in the Tenda AC15 SetOnlineDevName handling formSetDeviceName parameter, which can be exploited by a remote attacker to submit a special request that can crash the application or execute arbitrary code in the...

9CVSS8AI score0.01228EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2024/10/09 12:0 a.m.3 views

The vulnerability of the formWifiBasicSet() function (/goform/SetOnlineDevName) in the Tenda A301 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function /goform/SetOnlineDevName of the Tenda A301 router’s software lies in the fact that the operation may go beyond the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS6.8AI score0.00993EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/05 12:0 a.m.2 views

The vulnerability of the formSetDeviceName function in the /goform/SetOnlineDevName file of the Tenda AX1806 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetDeviceName function in the /goform/SetOnlineDevName file of the Tenda AX1806 router’s microprogramming software is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

9CVSS8.5AI score0.01451EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/06/28 5:15 p.m.26 views

CVE-2024-6403

A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched...

9.8CVSS0.00993EPSS
Exploits1References4
Rows per page
Query Builder