Lucene search
+L

1652 matches found

NVD
NVD
added 2023/09/27 3:19 p.m.19 views

CVE-2023-44023

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

9.8CVSS9.7AI score0.0091EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.11 views

Tenda AC10 缓冲区错误漏洞

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow vulnerabili...

9.8CVSS7.5AI score0.0091EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/27 12:00 a.m.114 views

CVE-2023-44023

The CVE-2023-44023 entry refers to a stack overflow in the Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01, caused by the ssid parameter in the form_fast_setting_wifi_set function. Public references in multiple trackers corroborate a stack overflow vulnerability in this device line. The...

9.8CVSS9.6AI score0.0091EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/27 12:00 a.m.17 views

CVE-2023-44023

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

7.8AI score0.0091EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/27 12:00 a.m.32 views

CVE-2023-44023

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

9.9AI score0.0091EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/21 6:15 p.m.39 views

CVE-2023-42810

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9.8AI score0.01837EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/21 6:15 p.m.13 views

DEBIAN-CVE-2023-42810

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS7.3AI score0.01837EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/21 5:11 p.m.167 views

CVE-2023-42810

The CVE-2023-42810 vulnerability affects the Node.js library systeminformation. Versions 5.0.0 through 5.21.6 contain an SSID Command Injection flaw in wifiConnections() and wifiNetworks() that could allow an attacker to execute arbitrary commands. The issue is fixed in version 5.21.7 through a p...

9.8CVSS9.7AI score0.01837EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/09/21 5:11 p.m.53 views

CVE-2023-42810 systeminformation SSID Command Injection Vulnerability

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9.9AI score0.01837EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/09/21 5:11 p.m.16 views

CVE-2023-42810 systeminformation SSID Command Injection Vulnerability

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9.7AI score0.01837EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/21 5:11 p.m.47 views

CVE-2023-42810 systeminformation SSID Command Injection Vulnerability

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.8 views

PT-2023-28597 · Npm · Systeminformation

Name of the Vulnerable Software and Affected Versions: systeminformation versions 5.0.0 through 5.21.6 Description: The systeminformation library for Node.JS has a SSID Command Injection Vulnerability. This issue affects versions 5.0.0 through 5.21.6. The problem was fixed with a parameter check ...

9.8CVSS9.6AI score0.01837EPSS
SaveExploits0References15
ATTACKERKB
ATTACKERKB
added 2023/08/30 1:15 p.m.5 views

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

9.8CVSS7.4AI score0.00838EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/30 1:15 p.m.13 views

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

9.8CVSS5.9AI score0.00838EPSS
SaveExploits1References1
NVD
NVD
added 2023/08/30 1:15 p.m.20 views

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

9.8CVSS9.8AI score0.00838EPSS
SaveExploits1References1
Prion
Prion
added 2023/08/30 1:15 p.m.28 views

Stack overflow

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

7.5CVSS9.7AI score0.00838EPSS
SaveExploits1References1Affected Software2
Positive Technologies
Positive Technologies
added 2023/08/30 12:00 a.m.11 views

PT-2023-27970 · Tenda · Tenda Ac7 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Tenda AC9 version V15.03.06.42 multi Description: A stack overflow issue was discovered, which occurs via the ssid parameter at the "/goform/fast setting wifi set" API endpoint. Recommendations: For Tenda AC7...

9.8CVSS9.3AI score0.00838EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/08/30 12:00 a.m.16 views

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

7.9AI score0.00838EPSS
SaveExploits1References1
CVE
CVE
added 2023/08/30 12:00 a.m.66 views

CVE-2023-41552

The CVE-2023-41552 entry concerns Tenda AC7 (V15.03.06.44) and AC9 (V15.03.06.42_multi). A stack overflow is triggered via the ssid parameter in the /goform/fast_setting_wifi_set API endpoint. Connected documents confirm this vulnerability class and endpoint, with no documented exploit details in...

9.8CVSS9.7AI score0.00838EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/08/30 12:00 a.m.34 views

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

9.9AI score0.00838EPSS
SaveExploits1References1
Rows per page
Query Builder