Tenda W30E set_wan_status function buffer overflow vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the failure of the setwanstatus function to correctly validate the length of the input data, and can be exploited by a remote attacker to...

The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E is related to the lack of measures taken to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attack...

CVE-2023-49411

Tenda W30E V16.01.0.124843 contains a stack overflow vulnerability via the function formDeleteMeshNode...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-49411

Tenda W30E V16.01.0.124843 contains a stack overflow vulnerability via the function formDeleteMeshNode...

CVE-2023-49406

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-49406

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49404

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formAdvancedSetListSet...

CVE-2023-49404

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formAdvancedSetListSet...

Stack overflow

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formAdvancedSetListSet...

Stack overflow

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

Command injection

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

Stack overflow

Tenda W30E V16.01.0.124843 contains a stack overflow vulnerability via the function formDeleteMeshNode...

CVE-2023-50001

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formUpgradeMeshOnline...

CVE-2023-49999

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setUmountUSBPartition...

CVE-2023-50000

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formResetMeshNode...

CVE-2023-49402

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...

CVE-2023-49402

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...