Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a page parameter containing a stack overflow via /goform/VirtualSer...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the newaccount parameter of /goform/editUserName...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a page parameter via /goform/NatStaticSetting containing a stack overflow...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/L7Im...

PT-2022-27553 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the PPPOEPassword parameter at the "/goform/QuickIndex" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, avoid using the PPPOEPassword...

PT-2022-27559 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/VirtualSer" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider disabling access to the...

PT-2022-27560 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SetIpBind" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider disabling access to the...

Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which originates from a stack overflow via the wlradio parameter in /goform/wifiSSIDset...

CVE-2022-45523

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/L7Im...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the opttype parameter via /goform/IPSECsave...

CVE-2022-45518

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

CVE-2022-45508

CVE-2022-45508 affects Tenda W30E, version 1.0.1.25(633). The vulnerability is a stack overflow in the /goform/editUserName endpoint triggered via the new_account parameter. The CVSSv3.1 base metrics indicate NETWORK attack vector, LOW complexity, no privileges required, user interaction not requ...

CVE-2022-45518

CVE-2022-45518 affects the Tenda W30E router (version 1.0.1.25(633)). The root cause is a stack overflow via the page parameter in the API endpoint /goform/SetIpBind . CVSS 3.1 base score 7.5 (High); attack vector network , complexity low , privileges none , user interaction none ; impact: Availa...

CVE-2022-45509

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the account parameter at /goform/addUserName...

CVE-2022-45524

CVE-2022-45524 affects Tenda W30E, specifically version 1.0.1.25(633). The issue is a stack overflow discovered in the opttype parameter exposed via the /goform/IPSECsave API. CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, no privileges required, no user interaction. Impact is listed ...

CVE-2022-45515

CVE-2022-45515 affects Tenda W30E router (firmware 1.0.1.25(633)) with a stack overflow in the /goform/addressNat endpoint triggered by the entries parameter. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK access, no privileges, no user interaction, and an impact to availability. The Connect...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/qossetting...

PT-2022-27541 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A command injection issue was found in the tpi get ping output function at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider disabling the tpi get pi...