Ac23 Firmware vulnerabilities
17 known vulnerabilities in Ac23 Firmware from Tenda. 17 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
AC23: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publ
- 9.8 Critical severity
AC23: Buffer Copy without Checking Size of Input
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been ma
- 8.8 High severity
AC23: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remot
- 8.8 High severity
AC23: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based buffer overflow. It is possible to launch the attack remotely.
- 9.8 Critical severity
AC23: Buffer Copy without Checking Size of Input
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack
- 9.8 Critical severity
AC23: Buffer Copy without Checking Size of Input
A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The ex
- 8.8 High severity
AC23: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The
- 8.8 High severity
AC23: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer ove
- 9.8 Critical severity
AC21: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be
- 8.8 High severity
AC23: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stac
- 7.5 High severity
AC23: Improper Resource Shutdown or Release
A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of
- 8.0 High severity
ac23_firmware: Stack-based Buffer Overflow
A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter.
- 8.8 High severity
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not…
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.
- 8.8 High severity
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters…
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability.
- 8.8 High severity
The compare_parentcontrol_time function does not authenticate user input parameters, resulting…
The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.
- 8.8 High severity
AC23: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attac
- 9.8 Critical severity
AC23: Out-of-bounds Write
A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remot