CVE-2024-25748

A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the fromSetIpMacBind function...

CVE-2023-41554

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

Stack overflow

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter wpapskcrypto at url /goform/WifiExtraSet...

Stack overflow

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

CVE-2023-41561

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg...

CVE-2023-41560

CVE-2023-41560 affects Tenda AC9 (V3.0 V15.03.06.42_multi). It is a stack-based overflow in the firewallEn parameter at /goform/SetFirewallCfg, potentially enabling remote denial of service/crash. CVSS v3.1 base score 9.8 (CRITICAL); attack vector NETWORK, no user interaction. The provided docume...

CVE-2023-41554

CVE-2023-41554 affects Tenda AC9 (V3.0, V15.03.06.42_multi). The vulnerability is a stack overflow in the wpapsk_crypto parameter on the /goform/WifiExtraSet API, causing potential remote impact over the network with high likelihood of impact to confidentiality, integrity, and availability. Publi...

CVE-2023-41560

Tenda AC9 V3.0 V15.03.06.42multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg...

CVE-2023-41563

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo...

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

CVE-2023-38935

CVE-2023-38935 affects multiple Tenda models (AC1206, AC8, AC5, AC10, AC9) with versions listed in the initial entry. A stack overflow via the list parameter in the formSetQosBand function is reported across sources; the CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privile...