Tenda JD12L vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Tenda JD12L: 5 record(s), with affected versions and fixes.
CVE-2026-13519
High · 8.8
CWE-119 Jun 28, 2026
Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow
A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
CVE-2026-13518
High · 8.8
CWE-119 Jun 28, 2026
Tenda JD12L addressNat fromAddressNat stack-based overflow
A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVE-2026-13517
High · 8.8
CWE-119 Jun 28, 2026
Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow
A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the argument security_5g can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2026-13516
High · 8.8
CWE-119 Jun 28, 2026
Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow
A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpeed results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
CVE-2026-13515
High · 8.8
CWE-119 Jun 28, 2026
Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow
A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.