Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which originates from a stack overflow vulnerability in the formWifiMacFilterSet method...

PT-2023-8314 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue is related to a stack overflow vulnerability in the formSetUplinkInfo function of the Tenda W9 wireless access point's firmware, allowing an attacker to execute arbitrary code remotely by...

CVE-2023-51098

The CVE-2023-51098 entry concerns Tenda W9 firmware version 1.0.0.7(4456)_CN, where the formSetDiagnoseInfo function contains a vulnerability allowing command injection. The root cause is the lack of neutralization of special elements in that function, enabling a remote attacker to execute arbitr...

CVE-2023-51099

Tenda W9 firmware version 1.0.0.7(4456) CN contains a command injection in the formexeCommand function. The issue stems from lack of neutralization of special elements in formexeCommand, potentially allowing a remote attacker to execute arbitrary code. The PT-security entry notes a temporary work...

CVE-2023-51097

CVE-2023-51097 affects Tenda W9 firmware v1.0.0.7(4456) CN. A stack overflow in the formSetAutoPing function is documented, potentially enabling arbitrary code execution (high/severe impact per sources). Remediation noted: temporarily disable the formSetAutoPing feature; no patched firmware versi...

CVE-2023-51102

CVE-2023-51102 affects Tenda W9, version 1.0.0.7(4456) CN. A stack overflow is reported in the formWifiMacFilterSet function, per multiple sources. CVSS v3.1 base score 9.8 (CRITICAL); impact multiple — confidentiality, integrity, and availability: HIGH/HIGH/HIGH. Connected sources confirm the vu...

CVE-2023-51101

Vulnerability : CVE-2023-51101 affects Tenda W9 firmware version 1.0.0.7(4456)_CN, caused by a stack/buffer overflow in the formSetUplinkInfo function. Impact : potential remote code execution or denial of service; CVSS v3.1 base score 9.8 (CRITICAL), exploitable over the network with no user int...

Tenda W9 安全漏洞

Tenda W9 is a wireless in-wall access point from Tenda, China. A buffer overflow vulnerability exists in Tenda W9 version V1.0.0.74456CN, which originates from the formSetUplinkInfo method failing to correctly validate the length of the input data, and can be exploited by a remote attacker to...

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version V1.0.0.74456CN, which is caused by a stack overflow vulnerability in the formSetAutoPing method...

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which is caused by a command injection vulnerability in the formSetDiagnoseInfo method...

CVE-2023-51101

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formSetUplinkInfo...

PT-2023-8324 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue is related to a stack overflow in the formSetAutoPing function, which can allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the Tenda W9...

PT-2023-8323 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue exists due to the lack of neutralization of special elements in the formSetDiagnoseInfo function of the Tenda W9 wireless access point's firmware. This can allow a remote attacker to...

CVE-2023-51099

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...

PT-2023-8121 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: The issue is related to a stack overflow in the formWifiMacFilterSet function, which can lead to a buffer overflow in memory. This can potentially allow a remote attacker to execute arbitrary code...

Tenda W9 Security Vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in the Tenda W9 V1.0.0.74456CN version, which is caused by a command injection vulnerability in the formGetDiagnoseInfo method...

CVE-2023-51102

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formWifiMacFilterSet...

CVE-2023-51100

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo...

CVE-2023-51098

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo...

PT-2023-8322 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue exists due to the lack of neutralization of special elements in the formexeCommand function. This could allow a remote attacker to execute arbitrary code. Recommendations:...