CVE-2022-46549

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo...

CVE-2022-46540

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat...

CVE-2022-46535

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...

PT-2022-27893 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered, which can be triggered via the security 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, avoid using th...

CVE-2022-46535

CVE-2022-46535 affects the Tenda F1203 router (firmware version V2.0.1.6). The issue is a buffer overflow in the deviceId parameter of /goform/SetClientState. NVD metrics list a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, low attack complexity, no privileges or user interaction...

CVE-2022-46533

The CVE-2022-46533 entry concerns Tenda F1203 firmware v2.0.1.6, where a buffer overflow arises in the SetClientState handler when processing the limitSpeed parameter (/goform/SetClientState). This is documented with a Network attack vector, low complexity, no privileges required, and a high impa...

Tenda F1203 操作系统命令注入漏洞

Tenda F1203 is a 11AC 1200M intelligent dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. and Ali. A command injection vulnerability exists in Tenda F1203 V2.0.1.6. An attacker can use this vulnerability to perform command injection via the mac parameter of...

CVE-2022-46531

The CVE-2022-46531 entry affects Tenda F1203 routers (firmware v2.0.1.6). The vulnerability is a buffer overflow in the deviceId parameter of the /goform/addWifiMacFilter API endpoint. Root cause: improper handling of input in deviceId leading to overflow. Impact per CVSS hints is availability lo...