Tenda W30E UploadCfg Function Buffer Overflow Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which is caused by the UploadCfg function failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

Stack overflow

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-49405

CVE-2023-49405 affects Tenda W30E, specifically version 16.01.0.12(4843). The vulnerability is a stack overflow in the UploadCfg function caused by insufficient input length validation. Exploitation could allow remote attackers to execute arbitrary code or cause a denial of service, as indicated ...

PT-2023-31209 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the UploadCfg function. Recommendations: For Tenda W30E version 16.01.0.124843, consider disabling the UploadCfg function until a patch is available. At...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-49405: Out-of-bounds Write

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2022-27982

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution RCE vulnerability via the fileName parameter at /guestauth/cfg/upLoadCfg.php...