Lucene search
+L

291 matches found

Prion
Prion
added 2022/05/03 4:15 p.m.28 views

Stack overflow

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

10CVSS9.5AI score0.1014EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/05/03 3:21 p.m.146 views

CVE-2022-28561

The CVE-2022-28561 entry concerns the Tenda AX12 router (22.03.01.21_cn). A stack/buffer overflow is triggered in the httpd service via the /goform/setMacFilterCfg function when handling crafted input, allowing an attacker to obtain a stable shell. Public references in the document set describe a...

10CVSS9.5AI score0.1014EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/03 3:21 p.m.36 views

CVE-2022-28561

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

9.8AI score0.1014EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/05/03 12:00 a.m.14 views

Tenda AX12 缓冲区错误漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.Tenda AX12 is vulnerable to a buffer overflow vulnerability, which originates from the /goform/setMacFilterCfg function in the httpd service that does not properly validate data boundaries when performing operations on...

10CVSS8.7AI score0.1014EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/04/27 12:00 a.m.38 views

Tenda AX12 Cross-Site Request Forgery Vulnerability (CNVD-2022-63550)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN firmware version is vulnerable to cross-site request forgery, which is caused by the sub422168 function of /goform/WifiExtraSet that does not sufficiently validate whether the request is from a...

7.1CVSS3.8AI score0.00457EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/27 12:00 a.m.51 views

Tenda AX12 Cross-Site Request Forgery Vulnerability (CNVD-2022-63551)

Tenda AX12 is a dual-band gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN is vulnerable to cross-site request spoofing. users, an attacker could use the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive operations...

7.1CVSS3.6AI score0.00455EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/25 4:16 p.m.11 views

CVE-2022-27375

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...

6.5CVSS5.8AI score0.00457EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/25 4:16 p.m.14 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

6.5CVSS5.8AI score0.00455EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/25 4:16 p.m.24 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

7.1CVSS0.00455EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2022/04/25 4:16 p.m.6 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

7.1CVSS5.9AI score0.00455EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/25 4:16 p.m.22 views

CVE-2022-27375

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...

7.1CVSS0.00457EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2022/04/25 4:16 p.m.6 views

CVE-2022-27375

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...

7.1CVSS5.9AI score0.00457EPSS
SaveExploits1References2
Prion
Prion
added 2022/04/25 4:16 p.m.33 views

Cross site request forgery (csrf)

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

7.1CVSS6.6AI score0.00455EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/04/25 4:16 p.m.27 views

Cross site request forgery (csrf)

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...

7.1CVSS6.6AI score0.00457EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/04/25 3:46 p.m.80 views

CVE-2022-27374

CVE-2022-27374 concerns the Tenda AX12 (V22.03.01.21_CN) router, where a Cross-Site Request Forgery (CSRF) vulnerability exists in the function sub_42E328 at /goform/SysToolReboot. This is reported across multiple sources (Red Hat, CNVD, CVE/NVD) and indicates an impact on availability (NVD CVSS:...

7.1CVSS6.6AI score0.00455EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/25 3:46 p.m.38 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

6.8AI score0.00455EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/04/25 3:46 p.m.37 views

CVE-2022-27375

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...

6.8AI score0.00457EPSS
SaveExploits1References1
CVE
CVE
added 2022/04/25 3:46 p.m.87 views

CVE-2022-27375

Tenda AX12 V22.03.01.21_CN firmware is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the sub_422168 function at /goform/WifiExtraSet. The issue arises from insufficient validation of the request source, enabling an attacker to craft harmful requests that trick a logged-in (trus...

7.1CVSS6.6AI score0.00457EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/04/25 12:00 a.m.9 views

Tenda AX12 跨站请求伪造漏洞

Tenda AX12 is a dual-band gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN is vulnerable to cross-site request spoofing. users, an attacker could use the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive operations...

7.1CVSS5.4AI score0.00455EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/03/14 12:00 a.m.25 views

Tenda AX12 Stack Overflow Vulnerability

Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.The Tenda AX12 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via list parameters...

7.8CVSS4.9AI score0.01238EPSS
SaveExploits1References1
Rows per page
Query Builder