EUVD-2022-44118

Malicious code in bioql PyPI...

PT-2025-3473 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the formSetSpeedWan function when handling the speed dir parameter. This can be exploited by a remote attacker to cause a denial of service...

Buffer overflow

Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length...

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

Command injection

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

CVE-2023-30135

Tenda AC18 v15.03.05.196318cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function...

CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

Stack overflow

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

Stack overflow

In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...

Stack overflow

In Tenda AC15 V15.03.05.19, The function "xkjsver32" contains a stack-based buffer overflow vulnerability...

CVE-2023-30375

The CVE-2023-30375 entry affects Tenda AC15 router, specifically version V15.03.05.19, where the stack-based buffer overflow exists in the getIfIp function. The issue is triggered remotely over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a base score of 9.8 (CRITICAL). Docum...

CVE-2023-30372

CVE-2023-30372 affects Tenda AC15 V15.03.05.19: the stack-based overflow in the xkjs_ver32 function. CVSS v3.1 base score 9.8 (Critical) with NETWORK attack vector, no user interaction required; impacts to confidentiality, integrity, and availability are HIGH. The vulnerability stems from a stack...

CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30369

The CVE-2023-30369 entry concerns the Tenda AC15 wireless router (model V15.03.05.19). Technical details in multiple sources identify a buffer overflow in the sub_E2F4 function of the device, leading to potential arbitrary code execution or denial of service. The CVSSv3.1 scores indicate a high-i...

CVE-2023-30371

CVE-2023-30371 affects Tenda AC15 firmware V15.03.05.19, where the vulnerable function sub_ED14 has a stack-based buffer overflow. Technical details across sources identify the affected device and function but do not provide a patch version or confirmed remediation. CVSS 3.1 indicates high impact...

CVE-2023-30378

The CVE-2023-30378 entry concerns Tenda AC15, specifically V15.03.05.19. The issue is a stack-based buffer overflow in the sub_8EE8 function, caused by insufficient boundary checking. Multiple sources describe an authenticated, remote attacker potentially triggering the overflow to execute arbitr...

CVE-2023-30370

CVE-2023-30370 affects the Tenda AC15 router specifically version V15.03.05.19. The vulnerability is a stack-based overflow in the GetValue function, which can lead to complete compromise of affected devices. The CVE’s published metrics indicate a 9.8/10 CRITICAL base score with network access re...

CVE-2023-30376

CVE-2023-30376 concerns a stack-based buffer overflow in the function henan_pppoe_user of the router firmware for Tenda AC15 V15.03.05.19 . The vulnerability is characterized as a network-exploitable issue with a base score of 9.8 (CRITICAL) under CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). T...

CVE-2023-30371

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-24170

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat...