Tenda Ac15 Firmware vulnerabilities

CVE-2024-2817 [MEDIUM] CWE-352 CVE-2024-2817: A vulnerability, which was classified as problematic, has been found in Tenda AC15 15.03.05.18. Affe A vulnerability, which was classified as problematic, has been found in Tenda AC15 15.03.05.18. Affected by this issue is the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The

CVE-2020-10989 [MEDIUM] CWE-79 CVE-2020-10989: An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows re An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter.

CVE-2020-10986 [MEDIUM] CWE-352 CVE-2020-10986: A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows r A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page.

CVE-2024-30840 [MEDIUM] CWE-121 CVE-2024-30840: A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of serv A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function.

CVE-2024-30613 [MEDIUM] CWE-787 CVE-2024-30613: Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPo Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function.