PT-2024-3228 · Tenda · Tenda Tx9

Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical vulnerability was found in the Tenda TX9, affecting the function sub 42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to a stack-based buffer overflow...

CVE-2023-47422

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...

CVE-2023-47422

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...

CVE-2023-47422: Improper Access Control

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...

CVE-2022-45337

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind...

CVE-2022-45337

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind...

Stack overflow

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind...

CVE-2022-45337

CVE-2022-45337 affects Tenda TX9 Pro firmware version 22.03.02.10. A stack overflow is triggered via the list parameter in the /goform/SetIpMacBind API endpoint. The vulnerability exposes a potential crash/denial of service (per CVSS 3.1 metrics: NETWORK attack, LOW complexity, no user interactio...

CVE-2022-45337

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind...

PT-2022-27472 · Tenda · Tenda Tx9 Pro

Name of the Vulnerable Software and Affected Versions: Tenda TX9 Pro version 22.03.02.10 Description: A stack overflow issue was discovered via the list parameter at the "/goform/SetIpMacBind" API endpoint. This issue affects the Tenda TX9 Pro router. Recommendations: For Tenda TX9 Pro version...

CVE-2022-45337

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind...

Tenda TX9 Pro 缓冲区错误漏洞

The Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda TX9 Pro firmware version v22.03.02.10, which stems from a list parameter in its /goform/SetIpMacBind component that allows an attacker to achieve a stack overflow...

CVE-2022-45337: Out-of-bounds Write

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind...

Tenda TX9 Pro 安全漏洞

The Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda TX9 Pro version V22.03.02.10, which originates from a buffer overflow via the component httpd/SetNetControlList...

Tenda TX9 Pro Buffer Overflow Vulnerability

Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China.Tenda TX9 Pro is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a buffer overflow...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

Buffer overflow

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033

CVE-2022-30033 affects the Tenda TX9 Pro router (V22.03.02.10). The issue is a Buffer Overflow in the httpd module’s setIPv6Status() function, enabling remote exploitation over the network with no user interaction. CVSS: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5). No exploitation or patch...