Tenda ac15 Firmware 15.03.05.20_multi

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.

Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow

Tenda AC15 WifiWpsStart formWifiWpsStart stack-based overflow

Tenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow

Tenda AC15 QuickIndex formQuickIndex stack-based overflow

Tenda AC15 addWifiMacFilter stack-based overflow

Tenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow

Tenda AC15 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

Tenda AC15 DhcpListClient fromDhcpListClient stack-based overflow

Tenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow

Tenda AC15 SetSpeedWan formSetSpeedWan stack-based overflow

Tenda AC15 WriteFacMac formWriteFacMac os command injection

Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.