CVE-2023-50992

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function...

CVE-2023-50988

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function...

CVE-2023-50984

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function...

Stack overflow

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function...

CVE-2023-50987

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function...

CVE-2023-50992

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function...

CVE-2023-50984

CVE-2023-50984 affects the Tenda i29 router (v1.0.0.5, i29 series) due to a buffer overflow in the spdtstConfigAndStart function triggered by the ip parameter. The root cause is insufficient validation of the input length/size on the ip parameter, allowing a potential remote exploit. NVD/Red Hat/...

CVE-2023-50989

CVE-2023-50989 affects Tenda i29 router (v1.0, V1.0.0.5). The pingSet method permits command execution because it fails to properly filter construct command special characters, enabling arbitrary command execution. Documented impact is arbitrary commands execution; no exploitation details or acti...

CVE-2023-50984

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function...

CVE-2023-50983

CVE-2023-50983 affects the Tenda i29 router (firmware v1.0.0.5). The vulnerability exists in the sysScheduleRebootSet function, where inadequate filtering of constructed command characters enables command injection. This can lead to arbitrary command execution with high impact on confidentiality,...

CVE-2023-50986

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function...

CVE-2023-50992

CVE-2023-50992 affects the Tenda i29 router (version V1.0.0.5). A vulnerability in the setPing function allows a stack overflow via the ip parameter, potentially enabling arbitrary code execution. Public sources consistently describe a buffer/stack overflow in this function; no exploits are docum...

Command injection

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...

CVE-2023-33530

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...

CVE-2023-33530

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges...