248 matches found
CVE-2022-47117
CVE-2022-47117 concerns the Tenda A15 router. Affected hardware: Tenda A15, firmware version 15.13.07.13. The vulnerability is a stack overflow in the security parameter exposed via the API endpoint /goform/WifiBasicSet . Public descriptions (CNVD/CNNVD) indicate this could allow an attacker to e...
CVE-2022-47119
CVE-2022-47119 affects the Tenda A15 family. A stack overflow is triggered via the ssid parameter in the /goform/WifiBasicSet API, as described in multiple sources. Reported impact indicates possible arbitrary code execution with high/critical severity (NVD CVSSv3.1: 9.8, NETWORK/LOW/NO PRIVILEGE...
CVE-2022-47120
CVE-2022-47120 affects Tenda A15 (v15.13.07.13). A stack overflow is triggered by processing the security_5g parameter in the /goform/WifiBasicSet API. Root cause described as lack of input length checking on security_5g, enabling potential arbitrary code execution on the device. The vulnerabilit...
CVE-2022-47123
The CVE-2022-47123 issue affects Tenda A15 V15.13.07.13, where a stack overflow is triggered by the wepkey3 parameter in the /goform/WifiBasicSet API. Root cause appears to be lack of input length checking on wepkey3, enabling potential arbitrary code execution. The CVSS v3.1 base score is 9.8 (C...
CVE-2022-47127
CVE-2022-47127 affects Tenda A15 (V15.13.07.13) via the wrlPwd parameter in /goform/WifiBasicSet, where an input length excess can trigger a stack overflow. The issue is described as a stack overflow leading to arbitrary code execution on the device (per CNVD/CNNVD references) with CVSSv3.1 base ...
CVE-2022-47128
CVE-2022-47128 affects Tenda A15, specifically version 15.13.07.13, which has a stack overflow via the wepkey2 parameter in the /goform/WifiBasicSet endpoint. The vulnerability can lead to arbitrary code execution as implied by multiple sources, though explicit exploit details are not provided in...
Tenda A15 缓冲区错误漏洞
Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepkey4 parameter, which stems from a lack of length checking of input data in the wepkey4 parameter of /goform/WifiBasicSet, and could be exploited to execute arbitrary code on the system...
CVE-2022-47121
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet...
CVE-2022-47116
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd...
Tenda A15 缓冲区错误漏洞
Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepkey2 parameter, which stems from a lack of length checking of input data in the wepkey2 parameter of /goform/WifiBasicSet, and can be exploited by attackers to execute arbitrary code on the...
CVE-2022-47128
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet...
PT-2022-28030 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered in the Tenda A15, which can be triggered via the wepkey2 parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13...
PT-2022-28021 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the ssid parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, avoid using the ssid parameter in the...
PT-2022-28025 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the wepkey3 parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, avoid using the wepkey3 parameter in th...
CVE-2022-47121
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet...
CVE-2022-47118
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet...
PT-2022-28026 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the wepkey4 parameter at the "/goform/WifiBasicSet" API endpoint. This issue affects the Tenda A15 device. Recommendations: For Tenda A15 version 15.13.07.13...
Tenda A15 缓冲区错误漏洞
Tenda A15 is a WiFi extender from Tenda China.A stack overflow vulnerability exists in the Tenda A15 wrlEn5g parameter, which is caused by incorrect boundary checking performed by /goform/WifiBasicSet. By sending an excessively long string using the wrlEn5g parameter, a remote attacker could...