CVE-2023-48963

CVE-2023-48963 affects Tenda i6 firmware 1.0.0.8(3856). A boundary/buffer overflow exists in the /goform/wifiSSIDget endpoint when handling untrusted input (index parameter). Exploitation could lead to remote code execution or denial of service, per CNVD/CNNVD summaries and RedHat/other entries. ...

CVE-2023-48964: Out-of-bounds Write

Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet...

CVE-2023-6304

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goformgetcmdprocess of the component Ping Tool. The manipulation of the argument url leads to os...

PT-2023-32604 · Tecno · Tecno 4G Portable Wifi Tr118

Name of the Vulnerable Software and Affected Versions: Tecno 4G Portable WiFi TR118 version TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830 Description: A critical issue has been identified, affecting the Ping Tool component, specifically the /goform/goform get cmd process file. The url argument is...

PT-2023-7506 · Tenda · Tenda Ax3

Name of the Vulnerable Software and Affected Versions: Tenda AX3 version V16.03.12.11 Description: The issue is related to a Command Execution vulnerability in the Tenda AX3 Wi-Fi router's firmware, specifically via the /goform/telnet function. This vulnerability is due to the lack of measures to...

PT-2023-7505 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: The issue is related to a Command Execution vulnerability via the /goform/telnet function. This vulnerability is associated with the failure to neutralize special elements when processing the...

CVE-2022-45781

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...

CVE-2022-45781: Out-of-bounds Write

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.12994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName...

PT-2023-14750 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 versions 1.0.0.1 2994 and earlier Description: A Buffer Overflow issue allows attackers to run arbitrary code via the "/goform/SetOnlineDevName" API endpoint. Recommendations: For Tenda AX1803 versions 1.0.0.1 2994 and earlier,...

The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute...

The vulnerability of the /goform/formSetACLFilter component in the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/formSetACLFilter component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point software relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute...

The vulnerability of the /goform/formSetWanDhcpplus component of the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/formSetWanDhcpplus component in the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary cod...

VulnCheck KEV: CVE-2023-23295

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root...

CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

Command injection

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

D-Link DIR-816 A2 Command Injection Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from the component /goform/Diagnosis containing command injection...

PT-2023-27041 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...

CVE-2023-39637: Improper Neutralization of Special Elements used in a Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637

CVE-2023-39637 affects D-Link DIR-816 A2 firmware 1.10 B05. The vulnerability is a command injection via the vulnerable component /goform/Diagnosis . CVSS-3.1 base metrics indicate network access, no privileges required, no user interaction, and high impact on confidentiality, integrity, and avai...