CVE-2022-38325

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile...

Buffer overflow

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting...

CVE-2022-38325

The CVE-2022-38325 issue affects Tenda AC15 and AC18 WiFi Routers (V15.03.05.19 multi). A buffer overflow was reported via the filePath parameter in the /goform/expandDlnaFile endpoint. Public sources describe the root cause as an input handling overflow in that API, with the CVE having a high im...

Tenda AC15 安全漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC15 WiFi Router version V15.03.05.19multi, AC18 WiFi Router version V15.03.05.19multi, which originates from the discovery of a buffer overflow vulnerability via the filePath parameter in...

PT-2022-24368 · Tenda · Tenda Ac18 Wifi Router +1

Name of the Vulnerable Software and Affected Versions: Tenda AC15 WiFi Router version V15.03.05.19 multi Tenda AC18 WiFi Router version V15.03.05.19 multi Description: A buffer overflow issue was discovered via the filePath parameter at the "/goform/expandDlnaFile" API endpoint. Recommendations:...

CVE-2022-38326: Buffer Copy without Checking Size of Input

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting...

CVE-2022-38325: Buffer Copy without Checking Size of Input

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile...

CVE-2022-35572

CVE-2022-35572 affects Linksys E5350 routers (firmware 1.0.00.037 and earlier). The /SysInfo.htm page does not require a session ID and calls show_sysinfo, exposing WPA passwords, SSIDs, MAC addresses, serial numbers, WPS pins, and hardware/firmware versions when remote management is enabled. Imp...

CVE-2022-35572: Missing Authentication for Critical Function

On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, and potentially other vendors/devices due to code reuse, the /SysInfo.htm URI does not require a session ID. This web page calls a showsysinfo function which retrieves WPA passwords, SSIDs, MAC Addresses, serial numbers, WPS...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

TCL LinkHub Mesh Wi-Fi 操作系统命令注入漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation.TCL LinkHub Mesh Wi-Fi is vulnerable to an operating system command injection vulnerability that originates in the confsrv ucloudaddnode function and can be exploited by attackers to cause arbitrary command execution...

TCL LinkHub Mesh Wi-Fi 信息泄露漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. The TCL LinkHub Mesh Wi-Fi confctlgetmasterwlan feature is vulnerable to information disclosure, which can be exploited by attackers to cause information disclosure...

Wi-Fi Router Buffer Overflow

The vulnerability of Wi-Fi router microprogramming systems such as RAXE500, RAXE450, XR1000, MK83, MK62, R6400v2, R7850, R6700v3, R7000P, R6900P, R8000, RS400, XR300, DC112A, R6400, WNDR3400v3, R7000, MR60, MR80, MS60, and MS80 arises due to a buffer overflow in the stack-based architecture...

NETGEAR Wi-Fi router Buffer Overflow Information Disclosure

The vulnerability of NETGEAR Wi-Fi router software models such as R6400, R7000, R7900, R7900P, R7960P, R8000, R8000P, RAX200, RS400, R6400v2, R7000P, RAX80, R6700v3, R6900P, and RAX75 lies in the fact that data is written beyond the buffer in memory. Exploiting this vulnerability can allow an...

NETGEAR XR1000 Command Injection

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Router SSI

The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models D7800, DM200, EX2700, EX6150v2, EX6100v2, EX6200v2, EX6250, EX6410, EX6420, EX6400v2, EX7300, EX6400, EX7320, EX7300v2, R7500v2, R7800, R8900, R9000, RAX120, RBK40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50,...

NETGEAR Wi-Fi Router Operational Data Protection

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR models D3600, D6000, D6200, and D6220 lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

NETGEAR Wi-Fi Router Authentication Bypass

The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...

Wi-Fi Router Authentication Bypass Privilege Escalation

The vulnerability of the microprogrammed Wi-Fi router software models R6900P, R7000P, R7900P, R7960P, R8000P, RAX75, and RAX80 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...