CVE-2022-45517

CVE-2022-45517 affects Tenda W30E router (firmware 1.0.1.25(633)). It is a stack overflow triggered by the page parameter in the /goform/VirtualSer endpoint. Impact: possible denial of service via network access; CVSS v3.1 base score 7.5 (HIGH), no privileges required, no user interaction. Remedi...

CVE-2022-45519

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter...

CVE-2022-45510

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the mitssidindex parameter at /goform/AdvSetWrlsafeset...

CVE-2022-45509

The CVE-2022-45509 record concerns Tenda W30E firmware v1.0.1.25(633), where a stack overflow is triggered by the account parameter at the /goform/addUserName API. Public disclosures in connected datasets confirm the affected device and endpoint, with CVSS v3.1 indicating NETWORK attack vector, L...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a page parameter via /goform/NatStaticSetting containing a stack overflow...

CVE-2022-45525

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

CVE-2022-45511

CVE-2022-45511 affects Tenda W30E V1.0.1.25(633). A stack overflow is triggered via the PPPOEPassword parameter at the /goform/QuickIndex API endpoint. Reported impact is high (availability impact), with network-exploitability and no privileges required. A PoC exists and may be automatable per th...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/L7Im...

CVE-2022-45516

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting...

CVE-2022-45517

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer...

CVE-2022-45515

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...

CVE-2022-45518

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a page parameter containing a stack overflow via /goform/VirtualSer...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the PPPOEPassword parameter of /goform/QuickIndex...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

PT-2022-27560 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SetIpBind" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider disabling access to the...

CVE-2022-45510

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the mitssidindex parameter at /goform/AdvSetWrlsafeset...

PT-2022-27559 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/VirtualSer" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider disabling access to the...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45513

The CVE-2022-45513 entry affects Tenda W30E V1.0.1.25(633). The vulnerability is a stack overflow in the /goform/P2pListFilter endpoint triggered by the page parameter, leading to a denial of service. The connected sources confirm the affected product and vulnerable parameter, but do not provide ...