Lucene search
+L

32 matches found

NVD
NVD
•added 2025/11/19 5:15 p.m.•19 views

CVE-2025-13400

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9.8CVSS0.00692EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/19 5:02 p.m.•31 views

CVE-2025-13400 Tenda CH22 WrlExtraGet formWrlExtraGet buffer overflow

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9CVSS0.00692EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/19 5:02 p.m.•30 views

CVE-2025-13400

CVE-2025-13400 affects Tenda CH22 v1.0.0.1. The buffer overflow arises in the formWrlExtraGet function located in /goform/WrlExtraGet, triggered by manipulating the chkHz argument. Public exploit exists and enables remote code execution or denial of service as described across multiple sources. R...

9.8CVSS8.2AI score0.00692EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/19 5:02 p.m.•5 views

CVE-2025-13400 Tenda CH22 WrlExtraGet formWrlExtraGet buffer overflow

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9CVSS8.2AI score0.00692EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•3 views

CVE-2025-13400: Buffer Copy without Checking Size of Input

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9.8CVSS6.1AI score0.00692EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/10/03 12:00 a.m.•13 views

The vulnerability of the formWrlExtraGet() function in the Tenda CH22 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formWrlExtraGet function in the Tenda CH22 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9CVSS7.4AI score0.00799EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/09/29 7:49 p.m.•13 views

CVE-2025-11117

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

9CVSS7.2AI score0.00799EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•39 views

Tenda CH22 formWrlExtraGet function buffer overflow vulnerability

Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from improper handling of the dips parameter in the formWrlExtraGet function in the /goform/GstDhcpSetSer file. An attacker can exploit this vulnerability to...

9CVSS8.3AI score0.00799EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/28 8:15 p.m.•25 views

CVE-2025-11117

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

9CVSS0.00799EPSS
SaveExploits1References5
OSV
OSV
•added 2025/09/28 8:15 p.m.•17 views

CVE-2025-11117

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

8.7CVSS6.3AI score0.00799EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/28 7:32 p.m.•6 views

CVE-2025-11117 Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

9CVSS7AI score0.00799EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/28 7:32 p.m.•46 views

CVE-2025-11117

The CVE-2025-11117 entry concerns Tenda CH22 (firmware 1.0.0.1). The vulnerability is in the formWrlExtraGet function of /goform/GstDhcpSetSer, where improper handling of the dips parameter leads to a buffer overflow. This enables remote exploitation with a high-severity impact to confidentiality...

9CVSS7AI score0.00799EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/09/28 7:32 p.m.•26 views

CVE-2025-11117 Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

9CVSS0.00799EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•20 views

PT-2025-39788

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A buffer overflow issue exists in the formWrlExtraGet function of the /goform/GstDhcpSetSer file. Manipulation of the dips argument can trigger this issue, allowing for remote exploitation. A public explo...

9CVSS9.1AI score0.00799EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•2 views

CVE-2025-11117: Buffer Copy without Checking Size of Input

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

9CVSS6.2AI score0.00799EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:34 a.m.•21 views

CVE-2024-44859

Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in formWrlExtraGet...

8CVSS7.4AI score0.00623EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:23 a.m.•19 views

CVE-2024-44387

Tenda FH1206 V1.2.0.88155EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet...

6.5CVSS7AI score0.00265EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•20 views

The vulnerability of the formWrlExtraGet() function in the microprogramming software for Tenda FH1201 allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWrlExtraGe function in the microprogramming software for Tenda FH1201 lies in the fact that the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, an...

8CVSS5.7AI score0.00623EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/09/04 4:15 p.m.•8 views

CVE-2024-44859

Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in formWrlExtraGet...

8CVSS6.1AI score0.00623EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/04 4:15 p.m.•30 views

CVE-2024-44859

Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in formWrlExtraGet...

8CVSS0.00623EPSS
SaveExploits1References1
Rows per page
Query Builder