Tenda AC7 vulnerabilities

In Tenda AC7 firmware version 15.03.06.44, a stack buffer overflow vulnerability exists in the wanSpeed parameter of the /goform/AdvSetMacMtuWan route. This can lead to remote arbitrary code execution.

A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the mac parameter. An attacker can remotely crash the device or potentially execute arbitrary code.

A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. An attacker can exploit this flaw to execute arbitrary code remotely or cause a denial of service.

A stack buffer overflow vulnerability exists in Tenda AC7 firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. An attacker can remotely crash the device or potentially execute arbitrary code.

A vulnerability was determined in Tenda AC7 (version 15.03.06.44). It affects an unknown function of the file /goform/setNotUpgrade. Manipulation of the newVersion argument causes a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been publicly disclosed.

A vulnerability was identified in Tenda AC7 (version 15.03.06.44). It affects an unknown function of the file /goform/saveAutoQos. Manipulation of the enable argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit is publicly available.

A vulnerability in Tenda AC7 router (version 15.03.06.44) affects an unknown function in the /goform/SetUpnpCfg file. Manipulation of the upnpEn argument leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit is publicly available.

A flaw in Tenda AC7 router (version 15.03.06.44) affects some unknown processing of the /goform/SetDDNSCfg file. Manipulation of the ddnsEn argument causes a stack-based buffer overflow. The attack can be initiated remotely, and the exploit has been published.

A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.