PT-2024-2970 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 firmware v1.0.1.25633 Description: The issue is related to a stack overflow vulnerability in the fromNatlimit function, which can be exploited via the page parameter. This vulnerability may allow a remote attacker to...

CVE-2022-45521

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter...

CVE-2022-45508

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the newaccount parameter at /goform/editUserName...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName...

CVE-2022-45519

CVE-2022-45519 affects Tenda W30E V1.0.1.25(633). The vulnerability is a stack overflow via the Go parameter at the /goform/SafeMacFilter endpoint, identified in multiple sources (NVD/Red Hat/PRION). CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileg...

CVE-2022-45515

CVE-2022-45515 affects Tenda W30E router (firmware 1.0.1.25(633)) with a stack overflow in the /goform/addressNat endpoint triggered by the entries parameter. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK access, no privileges, no user interaction, and an impact to availability. The Connect...