507 matches found
CVE-2022-40846
In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, a Stored Cross Site Scripting XSS vulnerability exists allowing an attacker to execute JavaScript code via the applications stored hostname...
CVE-2022-40845
CVE-2022-40845 affects the Tenda AC1200 Router model W15Ev2 with firmware V15.11.0.10(1576). The vulnerability is a password exposure caused by improper authorization/improper session management, enabling an attacker with router access to view sensitive information not explicitly authorized. CVSS...
CVE-2022-41396
CVE-2022-41396 affects Tenda AC1200 Router Model W15Ev2, specifically the setIPsecTunnelList function where command injection is possible via the IPsecLocalNet and IPsecRemoteNet parameters. The issue is documented across multiple sources (NVD/NVD-derived entries and CNVD/CNNVD mirrors) with CVSS...
CVE-2022-40844
CVE-2022-40844 affects the Tenda AC1200 Router, model W15Ev2, firmware version V15.11.0.10(1576). The root cause is a Stored Cross Site Scripting (XSS) vulnerability in the applications website filtering tab, exploitable via the URL body. The issue allows an attacker to execute JavaScript code in...
CVE-2022-40845
The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...
CVE-2022-42053
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a command injection vulnerability via the PortMappingServer parameter in the setPortMapping function...
CVE-2022-40844
In Tenda Shenzhen Tenda Technology Co., Ltd AC1200 Router model W15Ev2 V15.11.0.101576, a Stored Cross Site Scripting XSS issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body...
PT-2022-25575 · Tenda · Tenda Ac1200 Router
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router model W15Ev2 version V15.11.0.101576 Description: A Stored Cross Site Scripting XSS issue exists, allowing an attacker to execute JavaScript code via the application's website filtering tab, specifically the URL body...
CVE-2022-41396
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters...
CVE-2022-40845
The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...
PT-2022-25842 · Tenda · Tenda Ac1200 Router
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router Model W15Ev2 version V15.11.0.101576 Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the dmzHost parameter in the setDMZ function. Recommendations: For Tenda...
PT-2022-25577 · Tenda · Tenda Ac1200 Router
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router version 15.11.0.101576 Description: A Stored Cross Site Scripting XSS issue exists, allowing an attacker to execute JavaScript code via the application's stored hostname. This enables the attacker to potentially manipulate...
PT-2022-26227 · Tenda · Tenda Ac1200 Router
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router Model W15Ev2 version 15.11.0.101576 Description: The issue is related to a stack overflow via the setWanPpoe function, allowing attackers to cause a Denial of Service DoS by sending crafted overflow data. Recommendations:...
PT-2022-25843 · Tenda · Tenda Ac1200 Router
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router Model W15Ev2 version V15.11.0.101576 Description: The issue concerns multiple command injection vulnerabilities found in the function setIPsecTunnelList. These vulnerabilities can be exploited via the IPsecLocalNet and...
CVE-2022-42060
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data...
CVE-2022-41395
CVE-2022-41395 affects Tenda AC1200 Router Model W15Ev2 (V15.11.0.10(1576)). A command-injection vulnerability exists in the setDMZ function via the dmzHost parameter. CVSS v3.1 base score 7.8 (HIGH), with local access, low privileges required, no user interaction. Connected sources confirm the i...
PT-2022-25574 · Tenda · Tenda Ac1200
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 V-W15Ev2 version V15.11.0.101576 Description: The issue concerns improper authorization and improper session management, allowing the router login page to be bypassed. This enables authenticated attackers to read the router's...
CVE-2022-40843
Affected product: Tenda AC1200 V-W15Ev2 (W15Ev2, firmware version V15.11.0.10(1576)). Vulnerability: Improper authorization/improper session management allows bypassing the router login page. This can lead to reading the router’s syslog.log file which contains the MD5 password of the Administrato...
CVE-2022-40844
In Tenda Shenzhen Tenda Technology Co., Ltd AC1200 Router model W15Ev2 V15.11.0.101576, a Stored Cross Site Scripting XSS issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body...