3669 matches found
PT-2022-27886 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the deviceMac parameter at the "/goform/addWifiMacFilter" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...
PT-2022-27895 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the ssid parameter at the "/goform/fast setting wifi set" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, avoid using the ssid parameter in th...
CVE-2022-45979
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the ssid parameter at /goform/fastsettingwifiset...
Stack overflow
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the ssid parameter at /goform/fastsettingwifiset...
Command injection
Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...
Command injection
Tenda AX12 V22.03.01.21CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function...
Tenda AX12 缓冲区错误漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A security vulnerability exists in Tenda AX12 version v22.03.01.21CN, which originates from a stack overflow contained in the ssid parameter via /goform/fastsettingwifiset...
CVE-2022-45980: Cross-Site Request Forgery (CSRF)
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via /goform/SysToolRestoreSet...
CVE-2022-45977: Improper Neutralization of Special Elements used in an OS Command
Tenda AX12 V22.03.01.21CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function...
Tenda AX12 操作系统命令注入漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.21CN, which originates from a command injection vulnerability via the /goform/setMacFilterCfg function...
CVE-2022-45043: Improper Neutralization of Special Elements used in an OS Command
Tenda AX12 V22.03.01.16cn is vulnerable to command injection via goform/fastsettinginternetset...
Tenda AX12 操作系统命令注入漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.16cn, which originates from a command injection vulnerability via goform/fastsettinginternetset...
PT-2022-27710 · Tenda · Tenda Ax12
Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the "/goform/SysToolRestoreSet" API endpoint. This allows an attacker to perform unauthorized actions on the...
PT-2022-27707 · Tenda · Tenda Ax12
Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the /goform/setMacFilterCfg function. Recommendations: For Tenda AX12 version V22.03.01.21 CN, ...
CVE-2022-45520
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...
CVE-2022-45521
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter...
CVE-2022-45510
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the mitssidindex parameter at /goform/AdvSetWrlsafeset...
CVE-2022-45522
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter...