Authentication flaw

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

Stack overflow

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

Stack overflow

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

Stack overflow

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

Design/Logic Flaw

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Command injection

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

Design/Logic Flaw

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-39899

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45499

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

CVE-2022-39915

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q10, 12.2.11.3000 in Android R11, 12.3.07.2000 in Android S12, and 12.4.02.0 in Android T13 allows attackers to access sensitive information via implicit intent...

PT-2022-27543 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered via the wl radio parameter at the "/goform/WifiMacFilterGet" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider restricting access to the...

CVE-2022-39899

CVE-2022-39899 is an improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1. The issue can allow a local attacker to send input events via S Pen gestures due to insufficient authentication around the WindowManagerService. Affected software is Samsung...

Debian: Security Advisory (DLA-3232-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-45498

CVE-2022-45498 affects Tenda W6-S v1.0.0.4(510). The vulnerability lies in the tpi_systool_handle(0) function handling the /goform/SysToolReboot endpoint, allowing unauthenticated attackers to arbitrarily reboot the device (impact: availability). CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/...

CVE-2022-45501

CVE-2022-45501 affects Tenda W6-S v1.0.0.4(510). The vulnerability is a stack overflow in the wl_radio parameter exposed via the /goform/wifiSSIDset endpoint. CVSS v3.1 vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H with a base score of 7.5 (HIGH); exploit requires no authentication and no user int...

Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which originates from a stack overflow via the wlradio parameter in /goform/wifiSSIDset...

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

PT-2022-27542 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: The issue affects the component tpi systool handle0 and is related to the API endpoint /goform/SysToolReboot. This allows unauthenticated attackers to arbitrarily reboot the device. Recommendations:...