Show filters
21 Total Results
Displaying 1-10 of 21
Sort by:
Attacker Value
Unknown
CVE-2024-10280
Disclosure Date: October 23, 2024 (last updated November 02, 2024)
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
0
Attacker Value
Unknown
CVE-2023-38823
Disclosure Date: November 20, 2023 (last updated November 29, 2023)
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
0
Attacker Value
Unknown
CVE-2022-36571
Disclosure Date: August 31, 2022 (last updated February 24, 2025)
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting.
0
Attacker Value
Unknown
CVE-2022-36570
Disclosure Date: August 31, 2022 (last updated February 24, 2025)
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.
0
Attacker Value
Unknown
CVE-2022-36569
Disclosure Date: August 31, 2022 (last updated February 24, 2025)
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg.
0
Attacker Value
Unknown
CVE-2022-36568
Disclosure Date: August 31, 2022 (last updated February 24, 2025)
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList.
0
Attacker Value
Unknown
CVE-2021-42659
Disclosure Date: May 24, 2022 (last updated February 23, 2025)
There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs.
0
Attacker Value
Unknown
CVE-2020-26728
Disclosure Date: February 11, 2022 (last updated October 07, 2023)
A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code execution via shell metacharacters in the guestuser field to the __fastcall function with a POST request.
0
Attacker Value
Unknown
CVE-2020-22079
Disclosure Date: October 29, 2021 (last updated February 23, 2025)
Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.
0
Attacker Value
Unknown
CVE-2018-18709
Disclosure Date: October 29, 2018 (last updated November 27, 2024)
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function.
0
