Tenda ac15 Firmware 15.03.05.18

Tenda AC15 setsambacfg formSetSambaConf os command injection

Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow

An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a command injection vulnerability if injected into doSystemCmd.

Tenda AC15 QuickIndex formQuickIndex stack-based overflow

Tenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow

Tenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow

Tenda AC15 addWifiMacFilter stack-based overflow

Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow

Tenda AC15 saveParentControlInfo stack-based overflow

Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.

Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().

Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.

Tenda AC9/AC15 exeCommand formexeCommand buffer overflow

Tenda AC15 SetSpeedWan formSetSpeedWan stack-based overflow

Tenda AC15 SysToolChangePwd websGetVar stack-based overflow

Tenda AC15 POST Parameter SetDDNSCfg stack-based overflow

Tenda AC15 saveAutoQos stack-based overflow

Tenda AC15 fast_setting_pppoe_set stack-based overflow

Tenda AC15 setNotUpgrade stack-based overflow

Tenda AC15 WriteFacMac formWriteFacMac os command injection

Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.

Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..

Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.

Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.

Tenda AC15 SysToolReboot fromSysToolReboot cross-site request forgery

Tenda AC15 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery

A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function.

Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function.