PT-2023-31453 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function formRebootMeshNode. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the...

CVE-2023-50000

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formResetMeshNode...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the formUpgradeMeshOnline function to correctly validate the length of the input data, and can be exploited by a remote...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the formResetMeshNode function to correctly validate the length of the input data, and can be exploited by a remote attacker ...

CVE-2023-49999

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setUmountUSBPartition...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-50001

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formUpgradeMeshOnline...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the failure of the setwanstatus function to correctly validate the length of the input data, and can be exploited by a remote attacker to...

CVE-2023-50002

CVE-2023-50002 affects Tenda W30E router (version 16.01.0.12(4843)). A stack overflow in the function formRebootMeshNode allows out-of-bounds input handling, as described across multiple sources. Documented impact indicates potential remote code execution or denial of service with high confidenti...

CVE-2023-49999

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setUmountUSBPartition...

CVE-2023-49403

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setFixTools...

CVE-2023-49404

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formAdvancedSetListSet...

CVE-2023-49404

CVE-2023-49404 affects the Tenda W30E router (firmware version V16.01.0.12(4843)). A buffer/stack overflow is triggered in the function formAdvancedSetListSet , due to improper input length validation. The impact is described as remote code execution or a denial of service by a remote attacker. T...

CVE-2023-49405

CVE-2023-49405 affects Tenda W30E, specifically version 16.01.0.12(4843). The vulnerability is a stack overflow in the UploadCfg function caused by insufficient input length validation. Exploitation could allow remote attackers to execute arbitrary code or cause a denial of service, as indicated ...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which is caused by the UploadCfg function failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setUmountUSBPartition function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can b...

CVE-2023-49406

Affected product: Tenda W30E router, version 16.01.0.12(4843). The vulnerability is a Command Execution flaw in the /goform/telnet handler, caused by inadequate filtering of certain characters/commands, enabling arbitrary command execution. Impact is described in sources as high-severity (CVSS v3...

PT-2023-31209 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the UploadCfg function. Recommendations: For Tenda W30E version 16.01.0.124843, consider disabling the UploadCfg function until a patch is available. At...

PT-2023-31451 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function formResetMeshNode. Recommendations: For Tenda W30E version 16.01.0.124843, as a temporary workaround, consider disabling the formResetMeshNo...

CVE-2023-50000

The CVE-2023-50000 entry affects Tenda W30E, specifically version V16.01.0.12(4843). The vulnerability is a stack overflow in the function formResetMeshNode caused by improper input length validation, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. E...