Lucene search
+L

76 matches found

OSV
OSV
•added 2022/10/27 6:15 p.m.•15 views

CVE-2022-43365

IP-COM EW9 V15.11.0.149732 was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

7.5CVSS6.1AI score0.00871EPSS
SaveExploits1References1
Prion
Prion
•added 2022/10/27 6:15 p.m.•28 views

Command injection

IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the formSetDebugCfg function...

7.5CVSS9.7AI score0.05304EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/10/27 6:15 p.m.•25 views

Buffer overflow

IP-COM EW9 V15.11.0.149732 was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

5CVSS7.6AI score0.00871EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•4 views

CVE-2022-43367: Improper Neutralization of Special Elements used in a Command

IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the formSetDebugCfg function...

9.8CVSS8.2AI score0.05304EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/10/27 12:00 a.m.•15 views

IP-COM EW9 命令注入漏洞

The IP-COM EW9 is a wireless router from IP-COM. A security vulnerability exists in the IP-COM EW9 version V15.11.0.149732 that stems from a command injection vulnerability contained in the formSetDebugCfg function...

9.8CVSS8.3AI score0.05304EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•3 views

CVE-2022-43365: Buffer Copy without Checking Size of Input

IP-COM EW9 V15.11.0.149732 was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

7.5CVSS7.4AI score0.00871EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/10/27 12:00 a.m.•48 views

CVE-2022-43367

IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the formSetDebugCfg function...

10AI score0.05304EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/10/27 12:00 a.m.•13 views

CVE-2022-43367

IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the formSetDebugCfg function...

9.8AI score0.05304EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•36 views

Tenda W20E formSetDebugCfg Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E version V15.11.0.6, which stems from the formSetDebugCfg method not size-checking the input data with a request to /goform/setDebugCfg/, which can be exploited by an attacker to cause a...

9.8CVSS9.8AI score0.01147EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/23 3:15 p.m.•14 views

CVE-2022-40866

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

9.8CVSS5.8AI score0.01147EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/23 3:15 p.m.•24 views

Stack overflow

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

7.5CVSS9.4AI score0.01147EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/09/23 2:26 p.m.•67 views

CVE-2022-40866

The CVE-2022-40866 entry pertains to the Tenda W20E router (version V15.11.0.6). A stack overflow vulnerability exists in the formSetDebugCfg function triggered by the request to /goform/setDebugCfg/. Public sources indicate the issue stems from insufficient input size checks, enabling potential ...

9.8CVSS8.3AI score0.01147EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•3 views

CVE-2022-40866: Out-of-bounds Write

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

9.8CVSS8.3AI score0.01147EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/09/23 12:00 a.m.•15 views

PT-2022-25591 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E router version 15.11.0.6 Description: The issue is a stack overflow vulnerability in the formSetDebugCfg function, which is triggered by the request "/goform/setDebugCfg/". This vulnerability can be exploited, but details about the...

9.8CVSS9.4AI score0.01147EPSS
SaveExploits1References4
OSV
OSV
•added 2021/04/16 12:15 a.m.•14 views

CVE-2021-27691

Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...

9.8CVSS6.2AI score0.25183EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/15 12:00 a.m.•2 views

CVE-2021-27691: Improper Neutralization of Special Elements used in an OS Command

Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...

10CVSS6.5AI score0.25183EPSS
SaveExploits0References3
Rows per page
Query Builder