Tenda W30E Command Injection Vulnerability

The Tenda W30E is a wireless router device that provides Internet access, wireless coverage and more. A command injection vulnerability exists in the formWriteFacMac function of the /goform/WriteFacMac file in version 1.0.1.25633 of the Tenda W30E, which can be exploited by an attacker to execute...

PT-2024-24489

Name of the Vulnerable Software and Affected Versions Tenda W30E version 1.0 V1.0.1.25633 Description The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This allows for potential exploitation. Recommendations For Tenda W30E version 1.0...

PT-2024-3768 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the frmL7PlotForm function of the file /goform/frmL7ProtForm. This can be exploited by manipulating the page argument, allowing a remote...

PT-2022-27553 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the PPPOEPassword parameter at the "/goform/QuickIndex" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, avoid using the PPPOEPassword...

PT-2022-27560 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SetIpBind" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider disabling access to the...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the PPPOEPassword parameter of /goform/QuickIndex...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a page parameter via /goform/NatStaticSetting containing a stack overflow...

PT-2022-27548 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A command injection issue was discovered via the fileNameMit parameter at the "/goform/delFileName" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda W30E...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/SafeClientFilter...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/SafeUrlFilter...