291 matches found
Stack overflow
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...
CVE-2022-28561
The CVE-2022-28561 entry concerns the Tenda AX12 router (22.03.01.21_cn). A stack/buffer overflow is triggered in the httpd service via the /goform/setMacFilterCfg function when handling crafted input, allowing an attacker to obtain a stable shell. Public references in the document set describe a...
CVE-2022-28561
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...
Tenda AX12 缓冲区错误漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.Tenda AX12 is vulnerable to a buffer overflow vulnerability, which originates from the /goform/setMacFilterCfg function in the httpd service that does not properly validate data boundaries when performing operations on...
Tenda AX12 Cross-Site Request Forgery Vulnerability (CNVD-2022-63550)
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN firmware version is vulnerable to cross-site request forgery, which is caused by the sub422168 function of /goform/WifiExtraSet that does not sufficiently validate whether the request is from a...
Tenda AX12 Cross-Site Request Forgery Vulnerability (CNVD-2022-63551)
Tenda AX12 is a dual-band gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN is vulnerable to cross-site request spoofing. users, an attacker could use the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive operations...
CVE-2022-27375
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
CVE-2022-27374
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...
CVE-2022-27374
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...
CVE-2022-27374
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...
CVE-2022-27375
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
CVE-2022-27375
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
Cross site request forgery (csrf)
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...
Cross site request forgery (csrf)
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
CVE-2022-27374
CVE-2022-27374 concerns the Tenda AX12 (V22.03.01.21_CN) router, where a Cross-Site Request Forgery (CSRF) vulnerability exists in the function sub_42E328 at /goform/SysToolReboot. This is reported across multiple sources (Red Hat, CNVD, CVE/NVD) and indicates an impact on availability (NVD CVSS:...
CVE-2022-27374
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...
CVE-2022-27375
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
CVE-2022-27375
Tenda AX12 V22.03.01.21_CN firmware is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the sub_422168 function at /goform/WifiExtraSet. The issue arises from insufficient validation of the request source, enabling an attacker to craft harmful requests that trick a logged-in (trus...
Tenda AX12 跨站请求伪造漏洞
Tenda AX12 is a dual-band gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN is vulnerable to cross-site request spoofing. users, an attacker could use the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive operations...
Tenda AX12 Stack Overflow Vulnerability
Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.The Tenda AX12 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via list parameters...