CVE-2022-30040

Tenda AX1803 v1.0.0.12890 拒绝服务漏洞 概述 制造商网站信息：https://www.tenda.com.cn/profile/contact.html 固件下载地址：https://www.tenda.com.cn/download/default.html 漏洞描述 漏洞位于 rootfsubifs 文件系统中的 /bin/tdhttpd 内的 /goform/SetSysTimeCfg 函数，攻击者可以访问 http://ip/goform/SetSysTimeCfg 并通过设置 ntpserve 参数，引发栈缓冲区溢出，从而实现路由器拒绝服务的效果。...

The vulnerability of the tdhttpd service in the microprogramming software for Tenda AX1806 allows a hacker to cause a service failure.

The vulnerability of the tdhttpd service in the microprogramming-based router software of Tenda AX1806 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Tenda AX1803 跨站请求伪造漏洞

The Tenda AX1803 is a dual-band Gigabit WIFI6 router. A cross-site request forgery vulnerability exists in the Tenda AX1803 firmware, version USAX1803v2.0brv1.0.0.12994CNZGYD014, which exists in the /bin/tdhttpd file TendaAteMode function/goform/ateMode page, which can be exploited by an attacker...

CVE-2022-30040

The CVE-2022-30040 reports a vulnerability in Tenda AX1803 v1.0.0.1_2890 where a boundary/stack buffer overflow occurs in the ntpserve handling within /bin/tdhttpd (path: /goform/SetSysTimeCfg). The root cause is a buffer overflow in processing untrusted input, enabling a remote attacker to cause...