CVE-2023-49432
https://notcve.org/view.php?id=CVE-2023-49432
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg. Se ha descubierto que Tenda AX9 V22.03.01.46 contiene una vulnerabilidad de desbordamiento de pila en el parámetro 'deviceList' en /goform/setMacFilterCfg. • https://github.com/ef4tless/vuln/blob/master/iot/AX9/setMacFilterCfg.md • CWE-787: Out-of-bounds Write •
CVE-2023-49433
https://notcve.org/view.php?id=CVE-2023-49433
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg. Se ha descubierto que Tenda AX9 V22.03.01.46 contiene una vulnerabilidad de desbordamiento de pila en el parámetro 'lista' en /goform/SetVirtualServerCfg. • https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetVirtualServerCfg.md • CWE-787: Out-of-bounds Write •
CVE-2023-49434
https://notcve.org/view.php?id=CVE-2023-49434
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList. Se ha descubierto que Tenda AX9 V22.03.01.46 contiene una vulnerabilidad de desbordamiento de pila en el parámetro 'lista' en /goform/SetNetControlList. • https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList.md • CWE-787: Out-of-bounds Write •
CVE-2023-49435
https://notcve.org/view.php?id=CVE-2023-49435
Tenda AX9 V22.03.01.46 is vulnerable to command injection. Tenda AX9 V22.03.01.46 es vulnerable a la inyección de comandos. • https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList-3.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-49436
https://notcve.org/view.php?id=CVE-2023-49436
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList. Se ha descubierto que Tenda AX9 V22.03.01.46 contiene una vulnerabilidad de inyección de comandos en el parámetro 'lista' en /goform/SetNetControlList. • https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList-2.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •