PT-2022-27713 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to command injection via cmd get ping output. Recommendations: For Tenda W20E version 16.01.0.63392, consider restricting access to the cmd get ping output command until a pat...

PT-2022-27714 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

Tenda W20E 安全漏洞

Tenda W20E is a router from Tenda China. A security vulnerability exists in Tenda W20E version V16.01.0.63392, which stems from the presence of a buffer overflow vulnerability...

CVE-2022-45997

CVE-2022-45997 affects Tenda W20E router with firmware version 16.01.0.6(3392). The available connected documents confirm a buffer overflow vulnerability in this device, but do not provide concrete root-cause details or remediation steps. CVSSv3.1 metrics (from the initial data) indicate a high s...

Tenda W20E 操作系统命令注入漏洞

The Tenda W20E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W20E version V16.01.0.63392, which originates from a command injection vulnerability via cmdgetpingoutput...

CVE-2022-45997

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

CVE-2022-45996

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

CVE-2022-45996

Summary: CVE-2022-45996 affects the Tenda W20E router, version 16.01.0.6(3392). The vulnerability is a command injection via the cmd_get_ping_output function. The available connected sources consistently identify this specific device/firmware and the command-injection impact, but do not provide a...

CVE-2022-45997

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

Tenda W20E formSetDebugCfg Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E version V15.11.0.6, which stems from the formSetDebugCfg method not size-checking the input data with a request to /goform/setDebugCfg/, which can be exploited by an attacker to cause a...

Tenda W20E formSetPortMapping Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E router version V15.11.0.6, which originates from the formSetPortMapping method not size-checking the input data when goform/setPortMapping/ with a POST request, and can be exploited to...

Tenda W20E formIPMacBindDel Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E router version V15.11.0.6, which originates from the formIPMacBindDel method not size-checking the input data with the request /goform/delIpMacBind/, which can be exploited by an attacke...

Tenda W20E formDelDhcpRule Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W20E version V15.11.0.6, which originates from the formDelDhcpRule method not size-checking the input data with a request to /goform/delDhcpRules/, which can be exploited by an attacker t...

CVE-2022-40867

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2022-40868

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/...

CVE-2022-40867

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

CVE-2022-40868

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/...

Stack overflow

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/...

Stack overflow

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...