Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...

PT-2022-18185

Name of the Vulnerable Software and Affected Versions Tenda AC9 version V15.03.2.21 cn Description The issue is related to a stack overflow vulnerability in the SetSysTimeCfg function within the httpd service. This vulnerability allows an attacker to obtain a stable root shell through a...

CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2022-25457

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

Stack overflow

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

Stack overflow

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

Stack overflow

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2022-25459

The CVE-2022-25459 entry describes a stack overflow in the Tenda AC6 SetSysTimeCfg function (via the S1 parameter) affecting v15.03.05.09_multi. The root cause is a stack overflow in SetSysTimeCfg, leading to arbitrary command execution as the stated impact. No remediation details are provided in...

CVE-2022-25459

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2022-25457

CVE-2022-25457 – Tenda AC6 : A stack overflow was found in Tenda AC6 v15.03.05.09_multi triggered by the ntpserver parameter in the SetSysTimeCfg function. The vulnerability is documented with a CVSS v3.1 base score of 9.8 (CRITICAL) and a CVSS v2.0 base score of 10.0, indicating NETWORK access, ...

CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25440

CVE-2022-25440 affects Tenda AC9 router (v15.03.2.21). Root cause: a stack overflow in the SetSysTimeCfg function triggered by the ntpserver parameter. Impact indicators in sources describe potential to compromise confidentiality, integrity, and availability (high/critical). No explicit patch/ver...

PT-2022-17308

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.09 multi Description A stack overflow issue was discovered via the ntpserver parameter in the SetSysTimeCfg function. This issue can be exploited, potentially allowing for unauthorized access or control...

CVE-2022-25459: Out-of-bounds Write

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function...

CVE-2022-25457: Out-of-bounds Write

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

CVE-2022-25440: Out-of-bounds Write

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetSysTimeCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the ntpserver parameter in the SetSysTimeCfg function that does not properly validate data boundaries when performing operations on memory, and can be...