Lucene search
+L

106 matches found

Positive Technologies
Positive Technologies
•added 2023/03/15 12:00 a.m.•11 views

PT-2023-21023 · Tenda · Tenda Ax3

Name of the Vulnerable Software and Affected Versions: Tenda AX3 version 16.03.12.11 Description: A command injection issue was discovered via the lanip parameter at the "/goform/AdvSetLanip" API endpoint. This allows for potential exploitation. Recommendations: For Tenda AX3 version 16.03.12.11,...

9.8CVSS9.4AI score0.02773EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/03/15 12:00 a.m.•40 views

CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

10AI score0.02773EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•1 views

CVE-2023-27240: Improper Neutralization of Special Elements used in a Command

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...

9.8CVSS6AI score0.02773EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/20 2:15 p.m.•14 views

CVE-2022-34602

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

9.8CVSS6AI score0.01152EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/20 2:15 p.m.•19 views

CVE-2022-34602

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

9.8CVSS5.8AI score0.01152EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•14 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the ipqoslanipeditlist interface of goform/aspForm was found to contain a stack overflow...

9.8CVSS8.6AI score0.01152EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/07 7:15 p.m.•11 views

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

9.8CVSS6.4AI score0.34802EPSS
SaveExploits1References1
NVD
NVD
•added 2022/07/07 7:15 p.m.•27 views

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

10CVSS0.34802EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/07/07 5:08 p.m.•39 views

CVE-2022-32054

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

10AI score0.34802EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/07 5:08 p.m.•98 views

CVE-2022-32054

Summary of CVE-2022-32054 (Tenda AC10): Affects the Tenda AC10 router (US_AC10V1.0RTL_V15.03.06.26_multi_TD01). The issue is a remote code execution (RCE) vulnerability exploitable via the lanIp parameter. Several connected advisories specify this as a command injection flaw allowing an attacker ...

10CVSS9.9AI score0.34802EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/07 12:00 a.m.•4 views

CVE-2022-32054: Improper Neutralization of Special Elements used in an OS Command

Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 was discovered to contain a remote code execution RCE vulnerability via the lanIp parameter...

10CVSS8.8AI score0.34802EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/07 12:00 a.m.•14 views

Tenda AC10 操作系统命令注入漏洞

Tenda AC10 is a wireless router from Tenda China. An operating system command injection vulnerability exists in the Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 version, which stems from a remote code execution RCE vulnerability in the lanIp parameter...

10CVSS9.2AI score0.34802EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/18 4:15 p.m.•8 views

CVE-2022-28917

Tenda AX12 v22.03.01.21cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp...

7.8CVSS5.9AI score0.09551EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/18 4:15 p.m.•26 views

Stack overflow

Tenda AX12 v22.03.01.21cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp...

7.8CVSS7.7AI score0.09551EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/18 3:28 p.m.•42 views

CVE-2022-28917

Tenda AX12 v22.03.01.21cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp...

7.9AI score0.09551EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/18 3:28 p.m.•82 views

CVE-2022-28917

The CVE-2022-28917 entry concerns Tenda AX12 router, specifically v22.03.01.21_cn, which has a stack overflow vulnerability in the LAN configuration path: /goform/AdvSetLanIp via the lanIp parameter. The connected sources consistently describe a stack overflow in this router model, with exploitat...

7.8CVSS7.7AI score0.09551EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•2 views

CVE-2022-28917: Out-of-bounds Write

Tenda AX12 v22.03.01.21cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp...

7.8CVSS7.4AI score0.09551EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/10 2:15 p.m.•14 views

CVE-2022-29321

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

9.8CVSS5.8AI score0.03974EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/10 2:15 p.m.•6 views

CVE-2022-29321

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

10CVSS5.9AI score0.03974EPSS
SaveExploits1References3
Prion
Prion
•added 2022/05/10 2:15 p.m.•26 views

Stack overflow

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

10CVSS9.6AI score0.03974EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder