487 matches found
VulnCheck KEV: CVE-2025-34152
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
📄 Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. The vulnerability lies in the time parameter of the time configuration endpoint, which is passed unsanitized to a shell command executed via th...
Tenda AC6 fromSetSysTime function buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the time parameter in the...
CVE-2025-55603
Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...
CVE-2025-55498
Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...
Tenda M3 /goform/getMasterPassengerAnalyseData File Stack Buffer Overflow Vulnerability
Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 there is a stack buffer overflow vulnerability, the vulnerability stems from /goform/getMasterPassengerAnalyseData file in the...
CVE-2025-9299
A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely...
CVE-2025-9299
A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely...
Tenda M3 安全漏洞
Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 there is a stack buffer overflow vulnerability, the vulnerability stems from /goform/getMasterPassengerAnalyseData file in the...
CVE-2025-55498
Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...
CVE-2025-55498
CVE-2025-55498 affects Tenda AC6 (model 15.03.06.23_multi). The vulnerability is a buffer overflow in the fromSetSysTime() function caused by improper validation of the length of the time parameter, which can lead to denial of service. Public details across CNVD/CNVD/CNNVD/Red Hat/NVD references ...
Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19580)
The Tenda AC20 is a wireless router from the Chinese company Tenda. Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/saveParentControlInfo that fails to correctly validate the length and size of the input data, which can be...
Tenda AC6 安全漏洞
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the time parameter in the...
CVE-2025-55498
Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...
CVE-2025-55498
Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...
PT-2025-34067 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.23 multi Description: The Tenda AC6 version 15.03.06.23 multi contains a buffer overflow via the time parameter in the fromSetSysTime function. Recommendations: At the moment, there is no information about a newer...
CVE-2025-8940 Tenda AC20 saveParentControlInfo strcpy buffer overflow
A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to t...
Tenda AC20 安全漏洞
The Tenda AC20 is a wireless router from the Chinese company Tenda. Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/saveParentControlInfo that fails to correctly validate the length and size of the input data, which can be...
CVE-2025-34152
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
CVE-2025-34152 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...