Tenda CH22 Buffer Overflow Vulnerability

The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the formdelFileName function in the file /goform/delFileName to properly validate the length and size of the input data, which...

CVE-2025-9006

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9006

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9006

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9006 Tenda CH22 delFileName formdelFileName buffer overflow

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9006

CVE-2025-9006 affects Tenda CH22 (version 1.0.0.1). The vulnerability lies in the formdelFileName function of /goform/delFileName, where input length validation leads to a buffer overflow. Attack can be launched remotely, and the exploit has been publicly disclosed (PROOF-OF-CONCEPT). Several sou...

CVE-2025-9006 Tenda CH22 delFileName formdelFileName buffer overflow

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

Tenda CH22 安全漏洞

The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the formdelFileName function in the file /goform/delFileName to properly validate the length and size of the input data, which...

CVE-2022-45506

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

CVE-2022-45506

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

CVE-2022-45506

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

Command injection

Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...

Tenda W30E 操作系统命令注入漏洞

The Tenda W30E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W30E version V1.0.1.25633, which originates from a command injection vulnerability via the fileNameMit parameter of /goform/delFileName...

PT-2022-27548 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A command injection issue was discovered via the fileNameMit parameter at the "/goform/delFileName" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda W30E...