tenda ac15 firmware 15.03.05.19 vulnerabilities and exploits

(subscribe to this query)

Tenda AC15 V15.03.05.18 exists to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.

Tenda Ac15 Firmware 15.03.05.18 Tenda Ac15 Firmware 15.03.05.19

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20. Affected by this vulnerability is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack...

Tenda Ac15 Firmware 15.03.05.18 Tenda Ac15 Firmware 15.03.05.19 Tenda Ac15 Firmware 15.03.20 Multi Tenda Ac15

A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. The attack can be initiated remo...

Tenda Ac15 Firmware 15.03.05.19 Tenda Ac15

Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.

Tenda Ac15 Firmware 15.03.05.19

Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.

Tenda Ac15 Firmware 15.03.05.19

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote malicious users to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page.

Tenda Ac15 Firmware 15.03.05.19

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote malicious users to execute arbitrary system commands via the deviceName POST parameter.

Tenda Ac15 Firmware 15.03.05.19

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote malicious users to start a telnetd service on the device.

Tenda Ac15 Firmware 15.03.05.19

1 Github repository

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote malicious users to execute malicious payloads via the WifiName POST parameter.

Tenda Ac15 Firmware 15.03.05.19

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote malicious users to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter.

Tenda Ac15 Firmware 15.03.05.19

1 Github repository

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook