tenda Archives - CVE Vulnerability

CVE-2018-18732

Sun, 26 Feb 2023 06:47:54 +0000

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router’s web server — httpd. While processing the ‘ntpServer’ parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function.

The post CVE-2018-18732 appeared first on CVE Vulnerability.

CVE-2018-18731

Sun, 26 Feb 2023 06:47:54 +0000

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router’s web server — httpd. While processing the ‘deviceMac’ parameter for a post request, the value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function.

The post CVE-2018-18731 appeared first on CVE Vulnerability.

CVE-2018-18729

Sun, 26 Feb 2023 06:47:54 +0000

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router’s web server — httpd. While processing the ‘mac’ parameter for a post request, the value is directly used in a strcpy to a variable placed on the heap, which can leak sensitive information or even hijack program control flow.

The post CVE-2018-18729 appeared first on CVE Vulnerability.

CVE-2018-18728

Sun, 26 Feb 2023 06:47:54 +0000

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request.

The post CVE-2018-18728 appeared first on CVE Vulnerability.

CVE-2020-15916

Sun, 26 Feb 2023 06:38:02 +0000

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter.

The post CVE-2020-15916 appeared first on CVE Vulnerability.

CVE-2020-10989

Sun, 26 Feb 2023 06:36:02 +0000

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter.

The post CVE-2020-10989 appeared first on CVE Vulnerability.

CVE-2020-10988

Sun, 26 Feb 2023 06:36:02 +0000

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.

The post CVE-2020-10988 appeared first on CVE Vulnerability.

CVE-2020-10987

Sun, 26 Feb 2023 06:36:02 +0000

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

The post CVE-2020-10987 appeared first on CVE Vulnerability.

CVE-2020-10986

Sun, 26 Feb 2023 06:36:02 +0000

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page.

The post CVE-2020-10986 appeared first on CVE Vulnerability.

CVE-2019-16412

Sun, 26 Feb 2023 06:31:16 +0000

In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Prohibition of this zero value is only enforced within the GUI.)

The post CVE-2019-16412 appeared first on CVE Vulnerability.