CVE-2022-43101

CVE-2022-43101 affects Tenda AC23 V16.03.07.45_cn. A stack overflow is triggered via the devName parameter in the formSetDeviceName function, per multiple sources (NVD/CNVD/RedHat). The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a network-based, unauthenticated, remote exploi...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2022-12736)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the devName parameter...

CVE-2022-24160

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

CVE-2022-24153

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

Stack overflow

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

Stack overflow

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

CVE-2022-24153

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

CVE-2022-24160: Out-of-bounds Write

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

PT-2022-16503

Name of the Vulnerable Software and Affected Versions Tenda AX3 version 16.03.12.10 CN Description A stack overflow was discovered in the formAddMacfilterRule function, allowing attackers to cause a Denial of Service DoS via the devName parameter. Recommendations For Tenda AX3 version 16.03.12.10...

CVE-2022-24153: Out-of-bounds Write

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

PT-2022-16510

Name of the Vulnerable Software and Affected Versions Tenda AX3 version 16.03.12.10 CN Description A stack overflow was discovered in the function formSetDeviceName, allowing attackers to cause a Denial of Service DoS via the devName parameter. Recommendations For Tenda AX3 version 16.03.12.10 CN...

Tenda AX3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the devName parameter...

Tenda AX3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the devName parameter...

CVE-2021-40412: Improper Neutralization of Special Elements used in an OS Command

An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 8 the devname variable, that has the value of the name parameter provided through the SetDevName API, is not validated properly. This would lead to an OS command...

PT-2021-27206

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to the use of latest dev in btrfs show devname. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-8235

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the btrfs component of the Linux kernel and involves a problem with the btrfs show devname function. The function searches for devices but finds none, leading to ...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...

CVE-2007-3574

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...

CVE-2007-3574: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...