9 matches found
The vulnerability of the formaddUserName() function (/goform/addUserName) in the Tenda CH22 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formaddUserName function /goform/addUserName of the Tenda CH22 router’s software lies in the fact that the operation may be executed outside the buffer in memory when processing the Password parameter. Exploiting this vulnerability could allow an attacker to compromise th...
CVE-2025-5619: Stack-based Buffer Overflow
A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The explo...
Tenda W30E formaddUserName Method Buffer Overflow Vulnerability
Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the password parameter of the formaddUserName method...
CVE-2024-32285
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function...
CVE-2024-32285
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function...
Tenda W30E 安全漏洞
Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the password parameter of the formaddUserName method...
CVE-2024-32285
The Tenda W30E enterprise-grade wireless router (v1.0 V1.0.1.25(633) firmware) is susceptible to a stack-based buffer overflow vulnerability. The root cause is the formaddUserName method failing to properly validate the length and size of input data provided via the password parameter. An attacke...