CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45501

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

CVE-2022-45499

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

CVE-2022-39899

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

CVE-2022-39899

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

Authentication flaw

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

Stack overflow

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

Design/Logic Flaw

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Stack overflow

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

Stack overflow

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

Command injection

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

Design/Logic Flaw

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which originates from a stack overflow via the wlradio parameter in /goform/wifiSSIDset...

CVE-2022-45499

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

CVE-2022-45499

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

CVE-2022-45498

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45503

CVE-2022-45503 relates to a stack overflow in Tenda W6-S v1.0.0.4(510), exploitable via the linkEn parameter in the /goform/setAutoPing endpoint. NVD CVSS v3.1 base score 7.5 (HIGH), network attack vector, no user interaction required. The issue stems from an input handling flaw in the linkEn par...

CVE-2022-45504

CVE-2022-45504 affects Tenda W6-S v1.0.0.4(510). The issue exists in tpi_systool_handle(0) via the /goform/SysToolRestoreSet endpoint, allowing unauthenticated attackers to reboot the device. Impact is availability disruption; no confidentiality/integrity impact indicated. Evidence from multiple ...