Lucene search
+L

167 matches found

RedhatCVE
RedhatCVE
•added 2025/03/22 12:18 a.m.•22 views

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS7.5AI score0.00504EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/20 7:15 p.m.•14 views

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS5.9AI score0.00504EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2025/03/20 7:15 p.m.•8 views

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS6.7AI score0.00504EPSS
SaveExploits1References4
NVD
NVD
•added 2025/03/20 7:15 p.m.•22 views

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS0.00504EPSS
SaveExploits1References2
OSV
OSV
•added 2025/03/20 7:15 p.m.•12 views

CVE-2025-29218

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS5.9AI score0.005EPSS
SaveExploits1References2
NVD
NVD
•added 2025/03/20 7:15 p.m.•25 views

CVE-2025-29218

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS0.005EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/03/20 12:00 a.m.•31 views

CVE-2025-29218

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

0.005EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/03/20 12:00 a.m.•7 views

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5AI score0.00504EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•0 views

CVE-2025-29218: Stack-based Buffer Overflow

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS6.8AI score0.005EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/20 12:00 a.m.•32 views

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

0.00504EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/20 12:00 a.m.•111 views

CVE-2025-29217

The Tenda W18E v2.0 wireless router, specifically version v16.01.0.11 , is vulnerable to a stack overflow in the wifiSSID parameter within the /goform/setModules API endpoint. The root cause is the execution of operations outside the buffer in memory. A remote attacker can exploit this by submitt...

7.7AI score0.00504EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•13 views

Tenda W18E 安全漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiSSID parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...

6.5CVSS7AI score0.00504EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/03/20 12:00 a.m.•12 views

CVE-2025-29218

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5AI score0.005EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•1 views

CVE-2025-29217: Stack-based Buffer Overflow

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS6.8AI score0.00504EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/20 12:00 a.m.•85 views

CVE-2025-29218

The Tenda W18E wireless router (v2.0, firmware v16.01.0.11) is vulnerable to a stack overflow in the setWifiConfig() function located at the /goform/setModules endpoint. This flaw occurs during the processing of the wifiPwd parameter. An unauthenticated attacker can exploit this by sending a spec...

7.7AI score0.005EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•15 views

The vulnerability of the setLoginPassword() function in the Tenda W18E router software allows a hacker to bypass security restrictions and change the administrator password.

The vulnerability of the setLoginPassword function in the Tenda W18E router software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and change the administrator password by sending a specially crafted POST reque...

6.5CVSS5.5AI score0.00836EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•14 views

The vulnerability of Tenda W18E router microprogramming software, related to the use of strictly encrypted account data, allows a intruder to gain unauthorized access to the control console with administrator privileges.

The vulnerability of Tenda W18E router microprogramming software is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the control console with administrator privileges...

8.8CVSS5.5AI score0.0059EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•17 views

The vulnerability of the delFacebookPic() function in the Tenda W18E router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the delFacebookPic function in the Tenda W18E router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

8CVSS6.4AI score0.00833EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•14 views

The vulnerability of the initAdminUser() function in Tenda W18E router software allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability of the initAdminUser function in the Tenda W18E router software lies in the deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and enhance their privileges by sending specially crafted HTTP requests...

8.8CVSS5.5AI score0.00912EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•14 views

The vulnerability of Tenda W18E router microprogramming software, related to the use of strictly encrypted login data, allows a intruder to gain unauthorized access to the control console.

The vulnerability of Tenda W18E router microprogramming software is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the control console with administrator privileges...

8.8CVSS5.5AI score0.00544EPSS
SaveExploits1References3
Rows per page
Query Builder