CVE-2022-45503

CVE-2022-45503 relates to a stack overflow in Tenda W6-S v1.0.0.4(510), exploitable via the linkEn parameter in the /goform/setAutoPing endpoint. NVD CVSS v3.1 base score 7.5 (HIGH), network attack vector, no user interaction required. The issue stems from an input handling flaw in the linkEn par...

Tenda W6 操作系统命令注入漏洞

Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

CVE-2022-39899

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

PT-2022-27545 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered, which can be triggered via the linkEn parameter at the "/goform/setAutoPing" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, avoid using the...

CVE-2022-45498

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45497

CVE-2022-45497 affects Tenda W6-S v1.0.0.4(510). The vulnerability is a command injection in the tpi_get_ping_output function exposed at the /goform/exeCommand API endpoint. The CVSS 3.1 vector indicates network attack, no user interaction, with high impact to confidentiality, integrity, and avai...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45504

CVE-2022-45504 affects Tenda W6-S v1.0.0.4(510). The issue exists in tpi_systool_handle(0) via the /goform/SysToolRestoreSet endpoint, allowing unauthenticated attackers to reboot the device. Impact is availability disruption; no confidentiality/integrity impact indicated. Evidence from multiple ...

Tenda W6 安全漏洞

Tenda W6-S is a router from Tenda, China.A denial of service vulnerability exists in Tenda W6-S, which can be exploited by attackers to reboot the device and cause a denial of service...

CVE-2022-45501

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

CVE-2022-45498

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45501

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

CVE-2022-45497

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

PT-2022-27546 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: The issue affects the component tpi systool handle0 and is related to the API endpoint /goform/SysToolRestoreSet. This allows unauthenticated attackers to arbitrarily reboot the device...

PT-2022-27544 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered via the wl radio parameter at the "/goform/wifiSSIDset" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider disabling access to the...

CVE-2022-45497

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

PT-2022-27541 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A command injection issue was found in the tpi get ping output function at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider disabling the tpi get pi...

CVE-2022-45499

CVE-2022-45499 affects Tenda W6-S router, firmware v1.0.0.4(510). The vulnerability is a stack overflow triggered by the wl_radio parameter in the /goform/WifiMacFilterGet API. Impact per the sources indicates availability disruption (DoS) with high severity. The documents do not provide a confir...

Tenda W6 缓冲区错误漏洞

Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2022-39915

CVE-2022-39915 is an improper access control vulnerability in the Samsung Calendar app. It affects Calendar versions prior to: Android Q 11.6.08.0, Android R 12.2.11.3000, Android S 12.3.07.2000, and Android T 12.4.02.0, where an attacker could access sensitive information via implicit intent. Th...