Tenda W20E 缓冲区错误漏洞

Tenda W20E is a router from Tenda, China. A security vulnerability exists in Tenda W20E version v15.11.0.6, which originates from a security issue with the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN contained in the function formSetStaticRoute, which results in...

CVE-2022-48130: Out-of-bounds Write

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN...

CVE-2022-48130

CVE-2022-48130 affects the Tenda W20E router (v15.11.0.6). The vulnerability is described as multiple stack overflows in the function formSetStaticRoute, triggered by the parameters staticRouteNet, staticRouteMask, staticRouteGateway, and staticRouteWAN. The CVSS v3.1 score is 9.8 (CRITICAL) with...

PT-2023-15587

Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.6 Description The issue concerns multiple stack overflows in the function formSetStaticRoute, which can be triggered via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, and staticRouteWAN...

CVE-2022-45996

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

CVE-2022-45997

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

CVE-2022-45997

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

CVE-2022-45996

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

Buffer overflow

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

Command injection

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

CVE-2022-45996: Improper Neutralization of Special Elements used in an OS Command

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

CVE-2022-45996

Summary: CVE-2022-45996 affects the Tenda W20E router, version 16.01.0.6(3392). The vulnerability is a command injection via the cmd_get_ping_output function. The available connected sources consistently identify this specific device/firmware and the command-injection impact, but do not provide a...

CVE-2022-45997: Buffer Copy without Checking Size of Input

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

Tenda W20E 操作系统命令注入漏洞

The Tenda W20E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W20E version V16.01.0.63392, which originates from a command injection vulnerability via cmdgetpingoutput...

CVE-2022-45996

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

Tenda W20E 安全漏洞

Tenda W20E is a router from Tenda China. A security vulnerability exists in Tenda W20E version V16.01.0.63392, which stems from the presence of a buffer overflow vulnerability...

CVE-2022-45997

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

CVE-2022-45997

Tenda W20E V16.01.0.63392 is vulnerable to Buffer Overflow...

CVE-2022-45997

CVE-2022-45997 affects Tenda W20E router with firmware version 16.01.0.6(3392). The available connected documents confirm a buffer overflow vulnerability in this device, but do not provide concrete root-cause details or remediation steps. CVSSv3.1 metrics (from the initial data) indicate a high s...

PT-2022-27713 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to command injection via cmd get ping output. Recommendations: For Tenda W20E version 16.01.0.63392, consider restricting access to the cmd get ping output command until a pat...