PT-2024-2970 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 firmware v1.0.1.25633 Description: The issue is related to a stack overflow vulnerability in the fromNatlimit function, which can be exploited via the page parameter. This vulnerability may allow a remote attacker to...

CVE-2022-45521

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter...

CVE-2022-45508

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the newaccount parameter at /goform/editUserName...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45515

CVE-2022-45515 affects Tenda W30E router (firmware 1.0.1.25(633)) with a stack overflow in the /goform/addressNat endpoint triggered by the entries parameter. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK access, no privileges, no user interaction, and an impact to availability. The Connect...

CVE-2022-45519

CVE-2022-45519 affects Tenda W30E V1.0.1.25(633). The vulnerability is a stack overflow via the Go parameter at the /goform/SafeMacFilter endpoint, identified in multiple sources (NVD/Red Hat/PRION). CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileg...