CVE-2023-38937
https://notcve.org/view.php?id=CVE-2023-38937
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function. • https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetVirtualSer/README.md • CWE-787: Out-of-bounds Write •
CVE-2023-37710
https://notcve.org/view.php?id=CVE-2023-37710
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function. • https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/fromSetWirelessRepeat • CWE-787: Out-of-bounds Write •
CVE-2023-37711
https://notcve.org/view.php?id=CVE-2023-37711
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function. • https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/saveParentControlInfo • CWE-787: Out-of-bounds Write •
CVE-2023-37712
https://notcve.org/view.php?id=CVE-2023-37712
Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function. • https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/fromSetIpBind • CWE-787: Out-of-bounds Write •
CVE-2022-42077
https://notcve.org/view.php?id=CVE-2022-42077
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot. Tenda AC1206 versión US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 es vulnerable a Cross Site Request Forgery (CSRF) por medio de la función fromSysToolReboot • https://github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-1.md • CWE-352: Cross-Site Request Forgery (CSRF) •