Tenda CH22 formdeleteUserName function buffer overflow vulnerability

Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the formdeleteUserName function in the /goform/deleteUserName file improperly handling the oldaccount parameter. An attacker can exploit this vulnerabilit...

The vulnerability of the formdeleteUserName() function in the Tenda CH22 router software allows a hacker to cause a service failure.

The vulnerability of the formdeleteUserName function in the Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the oldaccount parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

CVE-2025-8180

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation of the argument oldaccount leads to buffer overflow. The attack may be launched remotely. The...

Tenda CH22 安全漏洞

Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the formdeleteUserName function in the /goform/deleteUserName file improperly handling the oldaccount parameter. An attacker can exploit this vulnerabilit...

TaoSecurity on Mastodon

--- I am now using Mastodon as a replacement for the blue bird. This is my attempt to verify myself via my blog. I am no longer posting to my old bird account. Copyright 2003-2020 Richard Bejtlich and TaoSecurity taosecurity.blogspot.com and www.taosecurity.com...