CVE-2023-23295

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root...

The vulnerability of the /goform/SetStaticRouteCfg component in the Tenda TX3 router software, which involves copying buffers without checking the size of the input data, allows an attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetStaticRouteCfg component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the wifiSSID parameter in the /goform/setModules function of the Tenda W18E v2.0 router’s microprogramming software, which allows a hacker to trigger a service failure.

The vulnerability of the wifiSSID parameter in the /goform/setModules function of the Tenda W18E v2.0 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability lies in the /goform/multimodalAdd component of the HTTP POST Request Handler in the microprogramming software for Tenda A15 routers. This allows a hacker to execute any arbitrary code.

The vulnerability in the /goform/multimodalAdd component of the HTTP POST Request Handler of the microprogramming-based router software Tenda A15 involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker operating remotely to execu...

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software allows a attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the /goform/setMacFilterCfg component in the Tenda AX12 Wi-Fi router software allows a attacker to execute arbitrary code.

The vulnerability of the /goform/setMacFilterCfg component in the Tenda AX12 Wi-Fi router software is related to a buffer overflow issue. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

CVE-2022-40867

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

CVE-2022-40862

Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting...

CVE-2022-40854

Tenda AC18 router contained a stack overflow vulnerability in /goform/fastsettingwifiset...

CVE-2022-40866

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

CVE-2022-34601

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm...

CVE-2022-28915

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm...

Tenda FH451 安全漏洞

The Tenda FH451 is a 450Mbps home wireless router from Tenda. A stack buffer overflow vulnerability exists in the Tenda FH451. The vulnerability originates in the webExcptypemanFilter function in the /goform/webExcptypemanFilter file. An attacker can exploit this vulnerability to execute code...

CVE-2025-4897

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely...

Tenda A15 安全漏洞

Tenda A15 is a WiFi extender from Tenda China. Tenda A15 suffers from a denial of service vulnerability that originates from an incorrect operation of the function formArpNerworkSet in the file /goform/ArpNerworkSet, which can be exploited by an attacker to cause a denial of service...

Tenda A15 安全漏洞

The Tenda A15 is a dual-band gigabit wireless router. A buffer overflow vulnerability exists in the Tenda A15. The vulnerability stems from improper handling of the /goform/multimodalAdd file by the HTTP POST request processor component and can be exploited by an attacker to remotely execute...

The vulnerability in the web interface for managing Tenda FH1202 micro-programmed software routers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface for managing Tenda FH1202 micro-program software routers is related to deficiencies in access control when processing the /goform/wrlwpsset endpoint. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the /goform/formTcpipSetup function in D-Link DIR-618 and DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/formTcpipSetup function in D-Link DIR-618 and DIR-605L router microprogramming software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...