Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which originates from a command injection vulnerability in the formexeCommand method...

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version V1.0.0.74456CN, which is caused by a stack overflow vulnerability in the formSetAutoPing method...

PT-2023-8324 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue is related to a stack overflow in the formSetAutoPing function, which can allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the Tenda W9...

PT-2023-8322 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue exists due to the lack of neutralization of special elements in the formexeCommand function. This could allow a remote attacker to execute arbitrary code. Recommendations:...

CVE-2023-51099

Tenda W9 firmware version 1.0.0.7(4456) CN contains a command injection in the formexeCommand function. The issue stems from lack of neutralization of special elements in formexeCommand, potentially allowing a remote attacker to execute arbitrary code. The PT-security entry notes a temporary work...

PT-2023-31764 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue was discovered via the formGetDiagnoseInfo function. Recommendations: For Tenda W9 version 1.0.0.74456 CN, consider disabling the formGetDiagnoseInfo function until a patc...

CVE-2023-51098

The CVE-2023-51098 entry concerns Tenda W9 firmware version 1.0.0.7(4456)_CN, where the formSetDiagnoseInfo function contains a vulnerability allowing command injection. The root cause is the lack of neutralization of special elements in that function, enabling a remote attacker to execute arbitr...

CVE-2023-51097

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formSetAutoPing...

PT-2023-8323 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue exists due to the lack of neutralization of special elements in the formSetDiagnoseInfo function of the Tenda W9 wireless access point's firmware. This can allow a remote attacker to...

CVE-2023-51097

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formSetAutoPing...

CVE-2023-51101

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formSetUplinkInfo...

CVE-2023-51100

Tenda W9 is affected by CVE-2023-51100 in firmware version 1.0.0.7(4456)_CN. The vulnerability is a command injection via the formGetDiagnoseInfo function. The CVSS 3.1 score is 9.8 (CRITICAL): network-remote vector, no authentication, no user interaction required, with high impact on confidentia...

Tenda W9 安全漏洞

Tenda W9 is a wireless in-wall access point from Tenda, China. A buffer overflow vulnerability exists in Tenda W9 version V1.0.0.74456CN, which originates from the formSetUplinkInfo method failing to correctly validate the length of the input data, and can be exploited by a remote attacker to...

CVE-2023-51100

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo...

CVE-2023-51102

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formWifiMacFilterSet...

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which is caused by a command injection vulnerability in the formSetDiagnoseInfo method...

PT-2023-8121 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue is related to a stack overflow in the formWifiMacFilterSet function, which can lead to a buffer overflow in memory. This can potentially allow a remote attacker to execute arbitrary code...

CVE-2023-51098

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo...

CVE-2023-51102

CVE-2023-51102 affects Tenda W9, version 1.0.0.7(4456) CN. A stack overflow is reported in the formWifiMacFilterSet function, per multiple sources. CVSS v3.1 base score 9.8 (CRITICAL); impact multiple — confidentiality, integrity, and availability: HIGH/HIGH/HIGH. Connected sources confirm the vu...

CVE-2023-51101

Vulnerability : CVE-2023-51101 affects Tenda W9 firmware version 1.0.0.7(4456)_CN, caused by a stack/buffer overflow in the formSetUplinkInfo function. Impact : potential remote code execution or denial of service; CVSS v3.1 base score 9.8 (CRITICAL), exploitable over the network with no user int...