CVE-2023-1751: Undefined Security Weakness

The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which...

CVE-2023-1749: Authorization Bypass Through User-Controlled Key

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute...

CVE-2023-1750: Authorization Bypass Through User-Controlled Key

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information...

CVE-2022-46535

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...

CVE-2022-46535

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...

CVE-2022-46549

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo...

CVE-2022-46549

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo...

CVE-2022-46531

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter...

Buffer overflow

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter...

Buffer overflow

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo...

PT-2022-27885 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the deviceId parameter at the "/goform/addWifiMacFilter" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...

CVE-2022-46531

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter...

CVE-2022-46531

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter...

CVE-2022-46531: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter...

CVE-2022-46549

CVE-2022-46549 affects Tenda F1203, specifically version 2.0.1.6. A buffer overflow was reported via the deviceId parameter at /goform/saveParentControlInfo. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, and a HIGH impact on availability; no confidentia...

Tenda F1203 安全漏洞

The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from a deviceId parameter in its /goform/SetClientState component that allows an attacker to implement a buffer overflow...

CVE-2022-46535

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...

Tenda F1203 安全漏洞

The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from a deviceId parameter in its /goform/addWifiMacFilter component that allows an attacker to implement a buffer overflow...

CVE-2022-46549: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo...

CVE-2022-46535

CVE-2022-46535 affects the Tenda F1203 router (firmware version V2.0.1.6). The issue is a buffer overflow in the deviceId parameter of /goform/SetClientState. NVD metrics list a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, low attack complexity, no privileges or user interaction...