CVE-2022-37175

The CVE-2022-37175 entry concerns Tenda AC15 devices with firmware V15.03.05.18. The httpd server has a stack buffer overflow in /goform/formWifiBasicSet due to boundary handling issues, enabling a potential remote impact. Public records describe this vulnerability as a potential arbitrary-code e...

CVE-2022-37175

Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet...

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

CVE-2022-36273

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

EUVD-2022-38990

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

PT-2022-23288 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 cn Description: The issue is related to command injection via the "goform/SetSysTimeCfg" API endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated...

CVE-2022-36273: Improper Neutralization of Special Elements used in an OS Command

Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...

CVE-2022-35555

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

CVE-2022-35558

A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35555

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

Stack overflow

A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35560: Out-of-bounds Write

A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35555: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

PT-2022-22900

Name of the Vulnerable Software and Affected Versions Tenda W6 version 1.0.0.94122 Description A command injection issue exists in the "/goform/exeCommand" API endpoint, allowing attackers to construct cmdinput parameters for arbitrary command execution. Recommendations For Tenda W6 version...

CVE-2022-34603

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm...

CVE-2022-34601

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm...

CVE-2022-34601

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm...

CVE-2022-34602

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

CVE-2022-34603

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm...

CVE-2022-34600

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm...