Lucene search
+L

379 matches found

CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•17 views

Tenda W20E 安全漏洞

The Tenda W20E is a router from the Chinese company Tenda. The Tenda W20E suffers from a command injection vulnerability that stems from the failure of the formSetDebugCfg function module parameter to properly filter constructor command special characters, commands, etc. The vulnerability is caus...

6.3CVSS7.7AI score0.0117EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/01 12:00 a.m.•33 views

CVE-2025-44866

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

0.0117EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•19 views

PT-2025-18678 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was found in the formSetDebugCfg function through the level parameter. This issue allows attackers to execute arbitrary commands via a manipulated request. Recommendations: F...

6.3CVSS7.8AI score0.0117EPSS
SaveExploits1References4
CVE
CVE
•added 2025/05/01 12:00 a.m.•95 views

CVE-2025-44865

The Tenda W20E router, specifically version 15.11.0.6 , is susceptible to a command injection vulnerability within the formSetDebugCfg function. This flaw occurs because the enable parameter fails to properly filter special characters and commands, allowing an attacker to execute arbitrary comman...

6.3CVSS8.3AI score0.0117EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/19 12:00 a.m.•12 views

The vulnerability of the formSetStaticRoute() function in the Tenda W20E wireless Wi-Fi router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetStaticRoute function in the Tenda W20E wireless Wi-Fi router software lies in the reading of data beyond the buffer in memory during the processing of parameters such as staticRouteNet, staticRouteMask, staticRouteGateway, and staticRouteWAN. Exploiting this...

10CVSS8.5AI score0.00928EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:04 a.m.•26 views

CVE-2024-3874

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

9CVSS6.9AI score0.01305EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/07/23 12:00 a.m.•15 views

The vulnerability of the `formSetRemoteWebManage` function in the Tenda W20E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetRemoteWebManage function in the Tenda W20E router software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information by sending specially...

9CVSS8.1AI score0.01305EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2024/04/18 12:00 a.m.•73 views

Tenda W20E Stack Buffer Overflow Vulnerability

The Tenda W20E is a wireless router developed by Tenda to provide wireless network connectivity and management capabilities. The Tenda W20E suffers from a stack buffer overflow vulnerability that originates from improper handling of the remoteIP parameter in the formSetRemoteWebManage function in...

9CVSS7.8AI score0.01305EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/16 4:15 p.m.•18 views

CVE-2024-3874

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

8.8CVSS6.5AI score0.01305EPSS
SaveExploits0References4
NVD
NVD
•added 2024/04/16 4:15 p.m.•38 views

CVE-2024-3874

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

9CVSS8.8AI score0.01305EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/16 3:31 p.m.•62 views

CVE-2024-3874 Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

9CVSS8.9AI score0.01305EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/04/16 3:31 p.m.•33 views

CVE-2024-3874 Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

9CVSS7AI score0.01305EPSS
SaveExploits0References4
CVE
CVE
•added 2024/04/16 3:31 p.m.•99 views

CVE-2024-3874

CVE-2024-3874 affects Tenda W20E devices (v13.11.0.6 family as referenced) where the vulnerable code path is the function formSetRemoteWebManage in /goform/SetRemoteWebManage. The root cause is a stack-based buffer overflow triggered by manipulating the remoteIP parameter, allowing a remote attac...

9CVSS8.7AI score0.01305EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2024/04/16 12:00 a.m.•17 views

Tenda W20E 安全漏洞

The Tenda W20E is a wireless router developed by Tenda to provide wireless network connectivity and management capabilities. The Tenda W20E suffers from a stack buffer overflow vulnerability that originates from improper handling of the remoteIP parameter in the formSetRemoteWebManage function in...

9CVSS7.9AI score0.01305EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/16 12:00 a.m.•3 views

PT-2024-5055

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A critical issue affects the formSetRemoteWebManage function of the file /goform/SetRemoteWebManage, leading to a stack-based buffer overflow when the remoteIP argument is manipulated. This can be...

9CVSS0.01305EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/16 12:00 a.m.•6 views

CVE-2024-3874: Stack-based Buffer Overflow

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated...

9CVSS6.2AI score0.01305EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/14 12:00 a.m.•17 views

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

10CVSS8.2AI score0.00928EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/03/19 1:15 a.m.•15 views

CVE-2023-26805

Tenda W20E v15.11.0.6 USW20EV4.0brv15.11.0.610681546841CNTDC is vulnerable to Buffer Overflow via function formIPMacBindModify...

9.8CVSS7.4AI score0.00928EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/19 1:15 a.m.•13 views

CVE-2023-26806

Tenda W20E v15.11.0.6USW20EV4.0brv15.11.0.610681546841 is vulnerable to Buffer Overflow via function formSetSysTime,...

9.8CVSS7.4AI score0.00928EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/19 1:15 a.m.•25 views

CVE-2023-26805

Tenda W20E v15.11.0.6 USW20EV4.0brv15.11.0.610681546841CNTDC is vulnerable to Buffer Overflow via function formIPMacBindModify...

9.8CVSS9.5AI score0.00928EPSS
SaveExploits1References1
Rows per page
Query Builder