Tenda AC10 安全漏洞

The Tenda AC10 is a home wireless router that provides a stable and fast internet connection. A buffer overflow vulnerability exists in Tenda AC10. The vulnerability stems from the AdvSetMacMtuWan function not validly checking the length of the incoming data when processing the wanMTU2 parameter...

CVE-2025-25458

Tenda AC10 V4.0siV16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2...

CVE-2025-25456

Tenda AC10 V4.0siV16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2...

TOTOLINK N600R 安全漏洞

The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that originates from the macCloneMac parameter in the setWanConfig function failing to properly validate the length and size of the input data, which can...

Tenda AC10 安全漏洞

The Tenda AC10 is a high performance router designed with Gigabit ports for both WAN and LAN ports. The Tenda AC10 AdvSetMacMtuWan suffers from a buffer overflow vulnerability that can be exploited by an attacker to submit a special request and cause a denial of service attack...

CVE-2025-0122

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0122

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0122 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0122 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0122

Prisma SD-WAN ION DoS (CVE-2025-0122) affects devices running 5.6.x, 6.1.x before 6.1.10, 6.2.x, 6.3.x before 6.3.4, 6.4.x before 6.4.2, or 6.5.0. An unauthenticated attacker on a neighboring network can disrupt packet processing by sending a burst of crafted packets, potentially impacting availa...

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers lies in the copying of buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device. Work...

The vulnerability of the application software interfaces of Session Smart Router and WAN Assurance, Session Smart Conductor, relates to bypassing the authentication process by using an alternative path or channel. This allows a perpetrator to gain full control over the device.

The vulnerability of the Application Programming Interface of routers like Session Smart Router and WAN Assurance, Session Smart Conductor, lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor,...

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Infinxt iEdge 100 安全漏洞

Infinxt iEdge 100 is a next-generation secure SD-WAN appliance for small and medium-sized branch offices from Infinxt. A security vulnerability exists in Infinxt iEdge 100 version 2.1.32, which stems from a command injection in the tracertVal parameter in the Tracert function...

The vulnerability of the fromAdvSetMacMtuWan() function in the Tenda AC9 router’s software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC9 router’s microprogramming software is related to the buffer overflow attack when processing the wanMTU parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

CVE-2025-29386

In Tenda AC9 v1.0 V15.03.05.14multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-29384

In Tenda AC9 v1.0 V15.03.05.14multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-29029

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that originates from the wanMTU parameter of the formAdvSetMacMtuWan function failing to properly validate the length of the input data, which can be exploited by an attacker t...