CVE-2022-46544: Buffer Copy without Checking Size of Input

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-46544

CVE-2022-46544 affects Tenda F1203 firmware 2.0.1.6. The vulnerability is a buffer overflow in the cmdinput parameter exposed at the /goform/exeCommand API endpoint. The NVD/CVSS data indicate NETWORK access, LOW attack complexity, no privileges required, no user interaction, and an impact on ava...

PT-2022-27898 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the cmdinput parameter at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...

CVE-2022-46544

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-46544

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in the Tenda W30E version V1.0.1.25633, which originates from a stack overflow contained in the cmdinput parameter via /goform/exeCommand...

CVE-2022-45505

The CVE-2022-45505 issue affects Tenda W30E, version 1.0.1.25(633), where a stack overflow is triggered by the cmdinput parameter at the /goform/exeCommand API endpoint. This is a network-accessible vulnerability with low attack complexity and no privileges required, potentially impacting availab...

PT-2022-27547 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the cmdinput parameter at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider restricting access to the...

CVE-2022-45505: Out-of-bounds Write

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-35555

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

CVE-2022-35555: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

CVE-2022-25458

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function...

CVE-2022-25458

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function...

Stack overflow

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function...

CVE-2022-25458

The CVE-2022-25458 entry concerns Tenda AC6 v15.03.05.09_multi, where a stack overflow is triggered by the cmdinput parameter in the exeCommand function. The vulnerability is described as allowing memory corruption and potential denial of service, with the NVD listing a CVSSv3.1 base score of 9.8...