Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC8 timeZone parameter, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause a denial of service...

CVE-2023-33669

CVE-2023-33669 affects the Tenda AC8 router firmware (versions prior to V4.0-V16.03.34.06). The vulnerability is a stack overflow in the timeZone handling path (sub_44db3c), which can lead to arbitrary code execution or a denial of service. Public references describe the issue consistently, with ...

CVE-2023-33669

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...

CVE-2023-28343

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/settimezone timezone parameter, because of settimezone in models/managementmodel.php...

SUSE CVE-2014-9220

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modifyschedule OMP command...

CVE-2022-45699

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

CVE-2022-45699

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

APsystems Energy Communication Unit 操作系统命令注入漏洞

The APsystems Energy Communication Unit APsystems ECU-R is an energy communication unit from APsystems USA. An operating system command injection vulnerability exists in APSystems ECU-R version 5203. An attacker could exploit this vulnerability to execute arbitrary commands as root using the...

CVE-2022-45699: Improper Neutralization of Special Elements used in an OS Command

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

CVE-2022-45655

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...

Buffer overflow

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...

CVE-2022-45655

CVE-2022-45655 affects Tenda AC6V1.0 (firmware 15.03.05.19). The buffer overflow arises from lack of length validation in the timeZone parameter of the form_fast_setting_wifi_set function, leading to potential denial of service. Exploitation is described as network-based with no user interaction ...

CVE-2022-45655: Buffer Copy without Checking Size of Input

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...

CVE-2022-45655

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...

CVE-2022-45655

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter in the formfastsettingwifiset function...

PT-2022-27597 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the timeZone parameter in the form fast setting wifi set function. This issue may be exploited to cause undefined behavior, potentially leading to code...

CVE-2022-43102

Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...

CVE-2022-43102

Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...

Stack overflow

Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...

PT-2022-26752 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the timeZone parameter in the fromSetSysTime function. Recommendations: For Tenda AC23 version 16.03.07.45 cn, as a temporary workaround, consider...