617 matches found
Command injection
Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setUmountUSBPartition...
Stack overflow
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...
Tenda W30E 安全漏洞
The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which is caused by the UploadCfg function failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute...
Tenda W30E 安全漏洞
The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the localMsg function to properly validate the length of the input data, and can be exploited by a remote attacker to execute...
CVE-2023-50001
CVE-2023-50001 affects Tenda W30E, specifically version 16.01.0.12(4843). A stack overflow exists in the formUpgradeMeshOnline() function caused by improper input length validation. The vulnerability can be exploited remotely to execute arbitrary code or cause a denial of service, as described in...
PT-2023-31206 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function localMsg. Recommendations: For Tenda W30E version 16.01.0.124843, consider disabling the localMsg function until a patch is available. At th...
CVE-2023-49404
CVE-2023-49404 affects the Tenda W30E router (firmware version V16.01.0.12(4843)). A buffer/stack overflow is triggered in the function formAdvancedSetListSet , due to improper input length validation. The impact is described as remote code execution or a denial of service by a remote attacker. T...
Tenda W30E 安全漏洞
The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the formAdvancedSetListSet function to correctly validate the length of the input data, and can be exploited by a remote...
Tenda W30E 安全漏洞
The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the handler function of /goform/telnet failing to correctly filter construct command special characters, commands, etc. The vulnerabilit...
CVE-2023-50000
The CVE-2023-50000 entry affects Tenda W30E, specifically version V16.01.0.12(4843). The vulnerability is a stack overflow in the function formResetMeshNode caused by improper input length validation, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. E...
Tenda W30E 安全漏洞
The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the failure of the setwanstatus function to correctly validate the length of the input data, and can be exploited by a remote attacker to...
Tenda W30E 安全漏洞
The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setFixTools function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can be exploite...
CVE-2023-49402
CVE-2023-49402 affects Tenda W30E (V16.01.0.12(4843)). A stack overflow in the localMsg function is described as the root cause, with practical impact stated as remote code execution or denial of service in multiple sources. Public data indicates a high-severity, network-based vulnerability (CVSS...
CVE-2023-49402
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...
CVE-2023-49410
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...
CVE-2023-49403
Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setFixTools...
CVE-2023-49999
Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setUmountUSBPartition...
CVE-2023-50000
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formResetMeshNode...
