CVE-2023-40847
https://notcve.org/view.php?id=CVE-2023-40847
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check. Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin es vulnerable al desbordamiento del búfer a través de la función "initIpAddrInfo". En la función, lee un parámetro proporcionado por el usuario, y la variable se pasa a la función sin ninguna comprobación de longitud. • https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/12/12.md • CWE-787: Out-of-bounds Write •
CVE-2023-40848
https://notcve.org/view.php?id=CVE-2023-40848
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858." Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin es vulnerable al desbordamiento del búfer a través de la función "sub_7D858". • https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/11/11.md • CWE-787: Out-of-bounds Write •
CVE-2023-40846
https://notcve.org/view.php?id=CVE-2023-40846
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998. • https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/9/9.md • CWE-787: Out-of-bounds Write •
CVE-2023-39670
https://notcve.org/view.php?id=CVE-2023-39670
Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. Se ha descubierto que Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 contiene un desbordamiento de búfer a través de la función fgets. • https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC6%20buffer%20overflow.md https://www.tendacn.com/download/list-3.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2023-38931
https://notcve.org/view.php?id=CVE-2023-38931
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function. • https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/cloudv2_setaccount/README.md • CWE-787: Out-of-bounds Write •