CVE-2022-46541

CVE-2022-46541 affects Tenda F1203 firmware version 2.0.1.6, where a buffer overflow occurs via the ssid parameter at /goform/fast_setting_wifi_set. CVSSv3.1 metrics indicate NETWORK attack vector, LOW complexity, privileges NONE, UI NONE, with availability impact (A) being High. The connected do...

CVE-2022-46533

The CVE-2022-46533 entry concerns Tenda F1203 firmware v2.0.1.6, where a buffer overflow arises in the SetClientState handler when processing the limitSpeed parameter (/goform/SetClientState). This is documented with a Network attack vector, low complexity, no privileges required, and a high impa...

CVE-2022-46551

CVE-2022-46551 affects the Tenda F1203 router, specifically version 2.0.1.6 , with a reported buffer overflow in the handling of the time parameter at /goform/saveParentControlInfo . The vulnerability is documented with a CVSS v3.1 base score of 7.5 (HIGH) , attack vector NETWORK , complexity LOW...

CVE-2022-46535

CVE-2022-46535 affects the Tenda F1203 router (firmware version V2.0.1.6). The issue is a buffer overflow in the deviceId parameter of /goform/SetClientState. NVD metrics list a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, low attack complexity, no privileges or user interaction...

CVE-2022-46539

CVE-2022-46539 affects Tenda F1203 firmware version 2.0.1.6. The issue is a buffer overflow exploitable via the security_5g parameter in the /goform/WifiBasicSet API. CVSS v3.1 base score 7.5 (High) with network access, low attack complexity, no privileges required, no user interaction, and impac...

CVE-2022-46531

The CVE-2022-46531 entry affects Tenda F1203 routers (firmware v2.0.1.6). The vulnerability is a buffer overflow in the deviceId parameter of the /goform/addWifiMacFilter API endpoint. Root cause: improper handling of input in deviceId leading to overflow. Impact per CVSS hints is availability lo...

CVE-2022-46537

CVE-2022-46537 : Affects Tenda F1203 with firmware 2.0.1.6. The vulnerability is a buffer overflow in the security parameter handled by the /goform/WifiBasicSet API endpoint. Exploitation could impact availability (CVSS 7.5; Network access, low complexity, no privileges required). No explicit pat...

Tenda F1203 操作系统命令注入漏洞

Tenda F1203 is a 11AC 1200M intelligent dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. and Ali. A command injection vulnerability exists in Tenda F1203 V2.0.1.6. An attacker can use this vulnerability to perform command injection via the mac parameter of...