CVE-2024-40412

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub42E410 function...

CVE-2024-40412

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub42E410 function...

CVE-2023-49427

Summary of CVE-2023-49427 : A buffer overflow in the Tenda AX12 firmware (version V22.03.01.46) is triggered by untrusted input in the SetNetControlList function, allowing a remote attacker to cause a denial of service. The affected product is a dual‑band Gigabit WiFi 6 router from Tenda. The ava...

CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...

CVE-2023-49432

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg...

CVE-2023-49433

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg...

CVE-2023-49435

Tenda AX9 V22.03.01.46 is vulnerable to command injection...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg...

Command injection

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList...

Stack overflow

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList...

Command injection

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

CVE-2023-49426

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg...

Command injection

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

Stack overflow

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg...

Stack overflow

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg...

PT-2023-31217 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.46 Description: A stack overflow issue was discovered via the list parameter at the "/goform/SetVirtualServerCfg" API endpoint. Recommendations: For Tenda AX12 version V22.03.01.46, as a temporary workaround,...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "mac" parameter in /goform/setModules not properly filtering constructed command special characters, commands, etc. This vulnerability can be exploite...

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "deviceList" parameter of /goform/setMacFilterCfg not properly validating the length of the input data. could be exploited by a remote attacker to execu...