Tenda O3 Firmware 1.0.0.12\(3880\)

Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges.

Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.

Tenda O3V2 httpd setSysTimeInfo fromSysToolTime stack-based overflow

Tenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow

Tenda O3V2 httpd setPing fromPingResultGet stack-based overflow

Tenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflow

Tenda O3V2 httpd setWrlBasicInfo formWifiBasicSet stack-based overflow

Tenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflow

Tenda O3V2 httpd setNetworkService setAutoReboot stack-based overflow

Tenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflow

Tenda O3V2 httpd setPingInfo fromNetToolGet os command injection

Tenda O3V2 httpd getTraceroute fromTraceroutGet command injection