CVE-2022-45980

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via /goform/SysToolRestoreSet...

CVE-2022-45977

Tenda AX12 V22.03.01.21CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function...

CVE-2022-45957

ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7uZRDGR2A68 is vulnerable to remote stack buffer overflow...

CVE-2022-45518

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

CVE-2022-45499

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/qossetting...

PT-2022-27200 · Trendnet · Trendnet Wireless Ac Easy-Upgrader Tew-820Ap

Name of the Vulnerable Software and Affected Versions: TrendNet Wireless AC Easy-Upgrader TEW-820AP version v1.0R, firmware version 1.01.B01 Description: A stack overflow issue exists in the TrendNet Wireless AC Easy-Upgrader TEW-820AP, which may result in remote code execution. Recommendations:...

CVE-2022-44373

A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP Version v1.0R, firmware version 1.01.B01 which may result in remote code execution...

PT-2022-27262 · Unknown · Udr-Ja1608 +2

Name of the Vulnerable Software and Affected Versions: UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier Description: The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. Recommendations: Fo...

CVE-2022-45668

Tenda i22 V1.0.0.34687 is vulnerable to Cross Site Request Forgery CSRF via function fromSysToolReboot...

CVE-2022-45660

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the schedStartTime parameter in the setSchedWifi function...

CVE-2022-45650

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function...

CVE-2022-45651

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer function...

CVE-2022-45673

Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery CSRF via function fromSysToolRestoreSet...

PT-2022-27586 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the deviceMac parameter in the addWifiMacFilter function. This issue allows for potential exploitation. No information is provided about the estimated...

D-Link DHP-W310AV 操作系统命令注入漏洞

The D-Link DHP-W310AV is a wireless mini wireless extender from China-based AUO D-Link. An operating system command injection vulnerability exists in D-Link DHP-W310AV firmware version 3.10EU, which stems from its System Checks function that allows attackers to implement command injection...

Tenda i22 跨站请求伪造漏洞

Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version V1.0.0.34687. An attacker can exploit this vulnerability to perform cross-site request forgery CSRF attacks via fromSysToolRestoreSet...

Horner Automation Remote Compact Controller 加密问题漏洞

The Horner Automation Remote Compact Controller Horner Automation RCC is a compact controller from Horner Automation, USA. A vulnerability exists in Horner Automation Remote Compact Controller 972 firmware version 15.40 due to an encryption issue in the configuration file using weak XOR encryptio...

Tenda i22 跨站请求伪造漏洞

Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version V1.0.0.34687. An attacker can exploit this vulnerability to perform cross-site request forgery CSRF attacks via fromSysToolReboot...

CVE-2022-40265

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker...