7 matches found
The vulnerability of the formdelFileName function in the Tenda CH22 router’s software allows a hacker to cause a service failure.
The vulnerability of the formdelFileName function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the fileNameMit parameter. Exploiting this vulnerability can allow a malicious actor to cause service...
CVE-2022-45506
Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...
CVE-2022-45506
Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...
Command injection
Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...
CVE-2022-45506
The CVE-2022-45506 issue affects Tenda W30E firmware version 1.0.1.25(633). Vulnerable component/file: the API endpoint /goform/delFileName, via the fileNameMit parameter, enabling command injection. CVSSv3.1 metrics show a base score of 9.8 (CRITICAL) with Network attack vector, Low attack compl...
