CVE-2022-40867

CVE-2022-40867 affects Tenda W20E router (FP: V15.11.0.6). The vulnerability is a stack overflow in the formIPMacBindDel function triggered by the /goform/delIpMacBind/ endpoint. Publicly reported details describe input data not being properly bounded, enabling a stack overflow that could lead to...

PT-2022-25592 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E router version 15.11.0.6 Description: The issue is a stack overflow vulnerability in the formIPMacBindDel function, which is triggered by the request "/goform/delIpMacBind/". This vulnerability can be exploited, potentially allowin...

CVE-2022-40867: Out-of-bounds Write

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

CVE-2021-27706: Buffer Copy without Checking Size of Input

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without...

PT-2021-17609

Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version V15.11.0.179502 CN Description: The issue allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex" request. This occurs because the formIPMacBindDel function directly passes the...