2653 matches found
CVE-2023-49425
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg...
CVE-2023-49424
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg...
PT-2023-7507 · Tenda · Tenda Ax9
Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: The issue is related to a SQL command injection vulnerability in the setDeviceInfo feature. This vulnerability can be exploited through the mac parameter at the "/goform/setModules" API endpoint. Th...
CVE-2023-49424
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg...
CVE-2023-49409
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-48963
Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/wifiSSIDget...
Buffer overflow
Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/wifiSSIDget...
CVE-2023-48963
CVE-2023-48963 affects Tenda i6 firmware 1.0.0.8(3856). A boundary/buffer overflow exists in the /goform/wifiSSIDget endpoint when handling untrusted input (index parameter). Exploitation could lead to remote code execution or denial of service, per CNVD/CNNVD summaries and RedHat/other entries. ...
CVE-2023-48963
Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/wifiSSIDget...
CVE-2023-6304
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goformgetcmdprocess of the component Ping Tool. The manipulation of the argument url leads to os...
PT-2023-32604 · Tecno · Tecno 4G Portable Wifi Tr118
Name of the Vulnerable Software and Affected Versions: Tecno 4G Portable WiFi TR118 version TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830 Description: A critical issue has been identified, affecting the Ping Tool component, specifically the /goform/goform get cmd process file. The url argument is...
PT-2023-7506 · Tenda · Tenda Ax3
Name of the Vulnerable Software and Affected Versions: Tenda AX3 version V16.03.12.11 Description: The issue is related to a Command Execution vulnerability in the Tenda AX3 Wi-Fi router's firmware, specifically via the /goform/telnet function. This vulnerability is due to the lack of measures to...
PT-2023-7505 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: The issue is related to a Command Execution vulnerability via the /goform/telnet function. This vulnerability is associated with the failure to neutralize special elements when processing the...
CVE-2022-45781
Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...
PT-2023-14750 · Tenda · Tenda Ax1803
Name of the Vulnerable Software and Affected Versions: Tenda AX1803 versions 1.0.0.1 2994 and earlier Description: A Buffer Overflow issue allows attackers to run arbitrary code via the "/goform/SetOnlineDevName" API endpoint. Recommendations: For Tenda AX1803 versions 1.0.0.1 2994 and earlier,...
The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute...
The vulnerability of the /goform/formSetACLFilter component in the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the /goform/formSetACLFilter component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point software relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute...
The vulnerability of the /goform/formSetWanDhcpplus component of the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the /goform/formSetWanDhcpplus component in the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary cod...
VulnCheck KEV: CVE-2023-23295
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root...
