PT-2022-27904

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered via the urls parameter at the "/goform/saveParentControlInfo" API endpoint. Recommendations For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider...

PT-2022-27889

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered, which can be triggered via the deviceId parameter at the "/goform/SetClientState" API endpoint. Recommendations For Tenda F1203 version 2.0.1.6, avoid using the...

PT-2022-27905

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered via the time parameter at the "/goform/saveParentControlInfo" API endpoint. Recommendations For Tenda F1203 version 2.0.1.6, consider restricting access to the...

PT-2022-27887

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered via the limitSpeed parameter at the "/goform/SetClientState" API endpoint. This issue allows for potential exploitation. No information is provided about the...

PT-2022-27900

Name of the Vulnerable Software and Affected Versions Tenda F1203 version 2.0.1.6 Description A buffer overflow issue was discovered via the entrys parameter at the "/goform/RouteStatic" API endpoint. Recommendations For Tenda F1203 version 2.0.1.6, consider restricting access to the...

CVE-2022-46538: Improper Neutralization of Special Elements used in an OS Command

Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac...

CVE-2022-46539: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security5g parameter at /goform/WifiBasicSet...

CVE-2022-46548: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient...

CVE-2022-46549: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo...

CVE-2022-46550: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo...

CVE-2022-46534: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speeddir parameter at /goform/SetSpeedWan...

CVE-2022-46531: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter...

CVE-2022-46542: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat...

CVE-2022-46551: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo...

CVE-2022-46547: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer...

CVE-2022-46541: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fastsettingwifiset...

CVE-2022-46544: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-46546: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic...

CVE-2022-46543: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mitInterface parameter at /goform/addressNat...

CVE-2022-46536: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState...