PT-2022-27708 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version 22.03.01.21 CN Description: A stack overflow issue was discovered via the ssid parameter at the "/goform/fast setting wifi set" API endpoint. Recommendations: For Tenda AX12 version 22.03.01.21 CN, avoid using the ssid...

CVE-2022-45980

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via /goform/SysToolRestoreSet...

Tenda AX12 操作系统命令注入漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.16cn, which originates from a command injection vulnerability via goform/fastsettinginternetset...

CVE-2022-45043

Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...

CVE-2022-45977

Tenda AX12 V22.03.01.21CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function...

CVE-2022-45980

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via /goform/SysToolRestoreSet...

CVE-2022-45979

The CVE-2022-45979 entry concerns the Tenda AX12 router with firmware v22.03.01.21_CN, where a stack overflow is triggered via the ssid parameter at /goform/fast_setting_wifi_set. Affected component: the fast_setting_wifi_set endpoint handling the ssid field. Impact stated in sources: availabilit...

PT-2022-27710 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the "/goform/SysToolRestoreSet" API endpoint. This allows an attacker to perform unauthorized actions on the...

Tenda AX12 跨站请求伪造漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. A security vulnerability exists in Tenda AX12 version v22.03.01.21CN, which originates from a cross-site request forgery CSRF via /goform/SysToolRestoreSet...

CVE-2022-45977

The CVE-2022-45977 entry concerns Tenda AX12 (V22.03.01.21_CN) with a command injection vulnerability exposed through the /goform/setMacFilterCfg endpoint. Affected component is the web/LAN management interface; root cause described as command injection in that function. The CVSSv3.1 scores indic...

CVE-2022-45979

Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the ssid parameter at /goform/fastsettingwifiset...

CVE-2022-45980

CVE-2022-45980 affects Tenda AX12 with firmware version V22.03.01.21_CN and is caused by a Cross-Site Request Forgery (CSRF) vulnerability on the /goform/SysToolRestoreSet endpoint. The NVD entry assigns a CVSS v3.1 base score of 8.8 (High) with NETWORK attack vector, LOW attack complexity, and u...

PT-2022-27388 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.16 cn Description: The issue is related to command injection via the goform/fast setting internet set API endpoint. This allows for potential malicious commands to be executed. Recommendations: For Tenda AX12...

Tenda AX12 Buffer Overflow Vulnerability (CNVD-2023-15694)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A security vulnerability exists in Tenda AX12 version V22.03.01.21CN, no detailed vulnerability details are available at this time...

CVE-2022-37292

Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...

CVE-2022-37292

Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...

CVE-2022-37292

Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...

Buffer overflow

Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...

CVE-2022-37292

CVE-2022-37292 affects Tenda AX12 with version V22.03.01.21_CN and involves a buffer overflow in the sub_42FDE4 function, triggered by handling the POST request under /goform/SetIpMacBind via the upper-level sub_430124 interface. Public sources concur on the vulnerable component and endpoint, wit...

PT-2022-23909 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Buffer Overflow that occurs in the sub 42FDE4 function. This function handles POST requests under the "/goform/SetIpMacBind" API endpoint, which is triggered by the sub...