PT-2022-27714 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

CVE-2022-45996: Improper Neutralization of Special Elements used in an OS Command

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

Tenda W20E formSetDebugCfg Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E version V15.11.0.6, which stems from the formSetDebugCfg method not size-checking the input data with a request to /goform/setDebugCfg/, which can be exploited by an attacker to cause a...

Tenda W20E formDelDhcpRule Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W20E version V15.11.0.6, which originates from the formDelDhcpRule method not size-checking the input data with a request to /goform/delDhcpRules/, which can be exploited by an attacker t...

Tenda W20E formSetPortMapping Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E router version V15.11.0.6, which originates from the formSetPortMapping method not size-checking the input data when goform/setPortMapping/ with a POST request, and can be exploited to...

Tenda W20E formIPMacBindDel Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E router version V15.11.0.6, which originates from the formIPMacBindDel method not size-checking the input data with the request /goform/delIpMacBind/, which can be exploited by an attacke...

CVE-2022-40868

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/...

CVE-2022-40867

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2022-40867

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

CVE-2022-40868

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/...

Stack overflow

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...

Stack overflow

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

Stack overflow

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/...

CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2022-40855

The CVE-2022-40855 issue affects the Tenda W20E router (firmware V15.11.0.6). A stack overflow in the formSetPortMapping function can be triggered via a POST to goform/setPortMapping/, with parameters such as portMappingServer, portMappingProtocol, portMappingWan, portMappingInternal, and portMap...

CVE-2022-40866

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

CVE-2022-40866

The CVE-2022-40866 entry pertains to the Tenda W20E router (version V15.11.0.6). A stack overflow vulnerability exists in the formSetDebugCfg function triggered by the request to /goform/setDebugCfg/. Public sources indicate the issue stems from insufficient input size checks, enabling potential ...

CVE-2022-40866

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/...

CVE-2022-40867

Tenda W20E router V15.11.0.6 USW20EV4.0brV15.11.0.610681546841CNTDC contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/...