Lucene search
+L

96 matches found

Vulnrichment
Vulnrichment
•added 2022/12/20 12:00 a.m.•16 views

CVE-2022-46532

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceMac parameter at /goform/addWifiMacFilter...

7.8AI score0.00854EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/12/20 12:00 a.m.•25 views

Tenda F1203 security vulnerabilities

The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from the deviceMac parameter of its /goform/addWifiMacFilter component that allows an attacker to implement a buffer overflow...

7.5CVSS7.9AI score0.00854EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/02 6:15 p.m.•37 views

CVE-2022-45645

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function...

7.5CVSS0.00854EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/02 6:15 p.m.•32 views

Buffer overflow

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function...

5CVSS7.8AI score0.00854EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/12/02 12:00 a.m.•75 views

CVE-2022-45645

CVE-2022-45645 affects Tenda AC6V1.0 with firmware 15.03.05.19. The vulnerability is a buffer overflow caused by unbounded handling of the deviceMac parameter in the addWifiMacFilter function. Documented impact per CVSS indicates a high-severity, network-based issue with availability impact and n...

7.5CVSS7.8AI score0.00854EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/02 12:00 a.m.•9 views

CVE-2022-45645: Buffer Copy without Checking Size of Input

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function...

7.5CVSS6.2AI score0.00854EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/12/02 12:00 a.m.•51 views

CVE-2022-45645

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function...

8AI score0.00854EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/12/02 12:00 a.m.•14 views

CVE-2022-45645

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function...

7.8AI score0.00854EPSS
SaveExploits1References1
NVD
NVD
•added 2022/08/25 3:15 p.m.•38 views

CVE-2022-37814

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the deviceid parameters in the function addWifiMacFilter...

9.8CVSS0.012EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/08/25 3:15 p.m.•17 views

CVE-2022-37814

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the deviceid parameters in the function addWifiMacFilter...

9.8CVSS5.8AI score0.012EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/25 3:15 p.m.•38 views

Stack overflow

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the deviceid parameters in the function addWifiMacFilter...

7.5CVSS9.4AI score0.012EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/08/25 2:07 p.m.•50 views

CVE-2022-37814

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the deviceid parameters in the function addWifiMacFilter...

9.7AI score0.012EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•8 views

CVE-2022-37814: Out-of-bounds Write

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the deviceid parameters in the function addWifiMacFilter...

9.8CVSS8.3AI score0.012EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•5 views

PT-2022-24092

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description The issue concerns multiple stack overflows that can occur via the deviceMac and device id parameters in the addWifiMacFilter function. Recommendations For Tenda AC1206 version 15.03.06.23, consider...

9.8CVSS0.012EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/05/12 12:00 a.m.•93 views

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53552)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the devicemac parameter in /setting/setDeviceName...

10CVSS5.4AI score0.02541EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/10 2:15 p.m.•14 views

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

10CVSS7.2AI score0.02541EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/05/10 2:15 p.m.•19 views

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

9.8CVSS7.3AI score0.02541EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/10 2:15 p.m.•47 views

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

10CVSS0.02541EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/10 2:15 p.m.•29 views

Command injection

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

10CVSS9.7AI score0.02541EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/05/10 1:16 p.m.•134 views

CVE-2022-28905

TOTOLink N600R (versions including V5.3c.7159_B20190425) contains a command injection vulnerability reachable through the devicemac parameter in the /setting/setDeviceName API. The root cause is an unsafely handled input in the devicemac field, enabling arbitrary command execution on the device. ...

10CVSS9.8AI score0.02541EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder