7487 matches found
CVE-2022-45504
CVE-2022-45504 affects Tenda W6-S v1.0.0.4(510). The issue exists in tpi_systool_handle(0) via the /goform/SysToolRestoreSet endpoint, allowing unauthenticated attackers to reboot the device. Impact is availability disruption; no confidentiality/integrity impact indicated. Evidence from multiple ...
CVE-2022-45497
CVE-2022-45497 affects Tenda W6-S v1.0.0.4(510). The vulnerability is a command injection in the tpi_get_ping_output function exposed at the /goform/exeCommand API endpoint. The CVSS 3.1 vector indicates network attack, no user interaction, with high impact to confidentiality, integrity, and avai...
Debian: Security Advisory (DLA-3232-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-45503
Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...
CVE-2022-45497: Improper Neutralization of Special Elements used in an OS Command
Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...
CVE-2022-45504
An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...
CVE-2022-45497
Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...
CVE-2022-45499
CVE-2022-45499 affects Tenda W6-S router, firmware v1.0.0.4(510). The vulnerability is a stack overflow triggered by the wl_radio parameter in the /goform/WifiMacFilterGet API. Impact per the sources indicates availability disruption (DoS) with high severity. The documents do not provide a confir...
CVE-2022-45501: Out-of-bounds Write
Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...
CVE-2022-45504
An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...
CVE-2022-45504: Missing Authentication for Critical Function
An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...
CVE-2022-45498: Missing Authentication for Critical Function
An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...
CVE-2022-39899
Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...
Tenda W6 操作系统命令注入漏洞
Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...
PT-2022-27543 · Tenda · Tenda W6-S
Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered via the wl radio parameter at the "/goform/WifiMacFilterGet" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider restricting access to the...
PT-2022-27544 · Tenda · Tenda W6-S
Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered via the wl radio parameter at the "/goform/wifiSSIDset" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider disabling access to the...
CVE-2022-39899
Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...
PT-2022-27545 · Tenda · Tenda W6-S
Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered, which can be triggered via the linkEn parameter at the "/goform/setAutoPing" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, avoid using the...