CVE-2022-30040

Tenda AX1803 v1.0.0.12890 Denial-of-service Vulnerability Overview Manufacturer's website infomation: https://www.tenda.com.cn/profile/contact.html Firmware download address: https://www.tenda.com.cn/download/default.html Vulnerability description The vulnerability lies in rootfs In / goform /...

tdhttpd DoS

The vulnerability of the tdhttpd service in the microprogramming-based router software of Tenda AX1806 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Tenda AX1803 跨站请求伪造漏洞

The Tenda AX1803 is a dual-band Gigabit WIFI6 router. A cross-site request forgery vulnerability exists in the Tenda AX1803 firmware, version USAX1803v2.0brv1.0.0.12994CNZGYD014, which exists in the /bin/tdhttpd file TendaAteMode function/goform/ateMode page, which can be exploited by an attacker...

CVE-2022-30040

The CVE-2022-30040 reports a vulnerability in Tenda AX1803 v1.0.0.1_2890 where a boundary/stack buffer overflow occurs in the ntpserve handling within /bin/tdhttpd (path: /goform/SetSysTimeCfg). The root cause is a buffer overflow in processing untrusted input, enabling a remote attacker to cause...

PT-2022-19982

Name of the Vulnerable Software and Affected Versions Tenda AX1803 version 1.0.0.1 2890 Description The issue is related to a Buffer Overflow that can cause a denial of service in the router. It is located in the /goform/setsystimecfg endpoint of the /bin/tdhttpd in the ubif file system. Attacker...

CVE-2022-30040: Out-of-bounds Write

Tenda AX1803 v1.0.0.12890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to...