3669 matches found
CVE-2022-46535: Buffer Copy without Checking Size of Input
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...
Tenda F1203 安全漏洞
The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from the ssid parameter of its /goform/fastsettingwifiset component that allows an attacker to implement a buffer overflow...
CVE-2022-45979
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the ssid parameter at /goform/fastsettingwifiset...
Command injection
Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...
Command injection
Tenda AX12 V22.03.01.21CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function...
Stack overflow
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the ssid parameter at /goform/fastsettingwifiset...
Tenda AX12 操作系统命令注入漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.16cn, which originates from a command injection vulnerability via goform/fastsettinginternetset...
Tenda AX12 操作系统命令注入漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.21CN, which originates from a command injection vulnerability via the /goform/setMacFilterCfg function...
Tenda AX12 缓冲区错误漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A security vulnerability exists in Tenda AX12 version v22.03.01.21CN, which originates from a stack overflow contained in the ssid parameter via /goform/fastsettingwifiset...
PT-2022-27710 · Tenda · Tenda Ax12
Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the "/goform/SysToolRestoreSet" API endpoint. This allows an attacker to perform unauthorized actions on the...
PT-2022-27707 · Tenda · Tenda Ax12
Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the /goform/setMacFilterCfg function. Recommendations: For Tenda AX12 version V22.03.01.21 CN, ...
CVE-2022-45043: Improper Neutralization of Special Elements used in an OS Command
Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...
CVE-2022-45977: Improper Neutralization of Special Elements used in an OS Command
Tenda AX12 V22.03.01.21CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function...
CVE-2022-45980: Cross-Site Request Forgery (CSRF)
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via /goform/SysToolRestoreSet...
CVE-2022-45522
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter...
CVE-2022-45520
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...
CVE-2022-45524
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave...
CVE-2022-45521
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter...