tendacn Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/tendacn/ Sun, 26 Feb 2023 06:33:32 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png tendacn Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/tendacn/ 32 32 CVE-2019-5071 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5071/ Sun, 26 Feb 2023 06:33:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5071/ An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS1 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this […]

The post CVE-2019-5071 appeared first on CVE Vulnerability.

]]> An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS1 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this vulnerability.

The post CVE-2019-5071 appeared first on CVE Vulnerability.

]]> CVE-2019-5072 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5072/ Sun, 26 Feb 2023 06:33:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5072/ An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS2 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this […]

The post CVE-2019-5072 appeared first on CVE Vulnerability.

]]> An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS2 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this vulnerability.

The post CVE-2019-5072 appeared first on CVE Vulnerability.

]]> CVE-2019-19505 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19505/ Sun, 26 Feb 2023 06:32:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19505/ Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the “Wireless” section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

The post CVE-2019-19505 appeared first on CVE Vulnerability.

]]> Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the “Wireless” section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

The post CVE-2019-19505 appeared first on CVE Vulnerability.

]]> CVE-2019-19506 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19506/ Sun, 26 Feb 2023 06:32:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19506/ Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the “homeplugd” process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot.

The post CVE-2019-19506 appeared first on CVE Vulnerability.

]]> Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the “homeplugd” process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot.

The post CVE-2019-19506 appeared first on CVE Vulnerability.

]]> CVE-2019-16412 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-16412/ Sun, 26 Feb 2023 06:31:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-16412/ In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Prohibition of this zero value is only enforced within the GUI.)

The post CVE-2019-16412 appeared first on CVE Vulnerability.

]]> In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Prohibition of this zero value is only enforced within the GUI.)

The post CVE-2019-16412 appeared first on CVE Vulnerability.

]]> CVE-2019-16213 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-16213/ Sun, 26 Feb 2023 06:31:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-16213/ Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system with root privileges.

The post CVE-2019-16213 appeared first on CVE Vulnerability.

]]> Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system with root privileges.

The post CVE-2019-16213 appeared first on CVE Vulnerability.

]]>