Command injection

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setFixTools...

Stack overflow

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formUpgradeMeshOnline...

Stack overflow

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formResetMeshNode...

CVE-2023-49410

Tenda W30E is affected (V16.01.0.12(4843)). The issue is a stack overflow in the set_wan_status function caused by improper input length validation. Attack details are not consistently provided across sources, but multiple references describe remote code execution or denial of service potential. ...

PT-2023-31212 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the set wan status function. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the set wan status...

CVE-2023-49403

CVE-2023-49403 affects Tenda W30E, specifically version V16.01.0.12(4843). The vulnerability is a command injection in the setFixTools function, allowing an attacker to execute arbitrary commands (potential remote code execution) and is reported with a high impact (NVD CVSS 3.1 base score 9.8). S...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setFixTools function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can be exploite...

CVE-2023-50002

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formRebootMeshNode...

CVE-2023-49402

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the localMsg function to properly validate the length of the input data, and can be exploited by a remote attacker to execute...

CVE-2023-49999

The CVE-2023-49999 entry concerns the Tenda W30E router, specifically firmware version 16.01.0.12(4843). The flaw is a command injection in the setUmountUSBPartition function, caused by insufficient filtering of constructor command characters, enabling arbitrary command execution. Documents indic...

CVE-2023-49406

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-50001

CVE-2023-50001 affects Tenda W30E, specifically version 16.01.0.12(4843). A stack overflow exists in the formUpgradeMeshOnline() function caused by improper input length validation. The vulnerability can be exploited remotely to execute arbitrary code or cause a denial of service, as described in...

CVE-2023-49404

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formAdvancedSetListSet...

CVE-2023-49402

CVE-2023-49402 affects Tenda W30E (V16.01.0.12(4843)). A stack overflow in the localMsg function is described as the root cause, with practical impact stated as remote code execution or denial of service in multiple sources. Public data indicates a high-severity, network-based vulnerability (CVSS...

PT-2023-31206 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function localMsg. Recommendations: For Tenda W30E version 16.01.0.124843, consider disabling the localMsg function until a patch is available. At th...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the formAdvancedSetListSet function to correctly validate the length of the input data, and can be exploited by a remote...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the handler function of /goform/telnet failing to correctly filter construct command special characters, commands, etc. The vulnerabilit...

CVE-2023-49411

CVE-2023-49411 affects Tenda W30E, specifically version V16.01.0.12(4843). A stack overflow is triggered in the formDeleteMeshNode function due to input length validation failure. This vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service, as indicated...

PT-2023-31453 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function formRebootMeshNode. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the...