Tendacn AC15 1.0
Approved changes feed: RSS · Atom
cpe:2.3:h:tendacn:ac15:1.0:*:*:*:*:*:*:*
part: h version: 1.0 update: *
| Vendor | Tendacn (911f347d-94dc-5fe9-b545-6a7f771d2f53) |
|---|---|
| Product | Ac15 (059594b8-4b41-598e-961f-136b2ca56909) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-13394 |
not_vulnerable | 2026-06-03 14:41:36.607155 |
Details available
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetNetControlList list parameter for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published: 2020-05-22T16:06:34.000Z
Updated: 2024-08-04T12:18:17.568Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13393 |
not_vulnerable | 2026-06-03 14:41:36.606425 |
Details available
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/saveParentControlInfo deviceId and time parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published: 2020-05-22T16:06:41.000Z
Updated: 2024-08-04T12:18:17.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13392 |
not_vulnerable | 2026-06-03 14:41:36.605866 |
Details available
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/setcfm funcpara1 parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published: 2020-05-22T16:06:47.000Z
Updated: 2024-08-04T12:18:17.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13391 |
not_vulnerable | 2026-06-03 14:41:36.605326 |
Details available
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetSpeedWan speed_dir parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published: 2020-05-22T16:06:55.000Z
Updated: 2024-08-04T12:18:17.636Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13390 |
not_vulnerable | 2026-06-03 14:41:36.604761 |
Details available
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/addressNat entrys and mitInterface parameters for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published: 2020-05-22T16:07:03.000Z
Updated: 2024-08-04T12:18:17.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13389 |
not_vulnerable | 2026-06-03 14:41:36.601963 |
Details available
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/openSchedWifi schedStartTime and schedEndTime parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published: 2020-05-22T16:07:10.000Z
Updated: 2024-08-04T12:18:17.598Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.