618 matches found
CVE-2022-45507
CVE-2022-45507 affects Tenda W30E v1.0.1.25(633): a stack overflow is triggered via the editNameMit parameter in the /goform/editFileName API endpoint. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no user interaction required. Connected sources indicate potential PoC exploitability (POC...
PT-2022-27554 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SafeEmailFilter" API endpoint. This issue affects the Tenda W30E router. Recommendations: For Tenda W30E version...
CVE-2022-45517
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer...
CVE-2022-45522
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter...
CVE-2022-45515
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...
CVE-2022-45506
The CVE-2022-45506 issue affects Tenda W30E firmware version 1.0.1.25(633). Vulnerable component/file: the API endpoint /goform/delFileName, via the fileNameMit parameter, enabling command injection. CVSSv3.1 metrics show a base score of 9.8 (CRITICAL) with Network attack vector, Low attack compl...
CVE-2022-45507
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName...
CVE-2022-45523
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/L7Im...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the downaction parameter via /goform/CertListInfo...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2022-45515
CVE-2022-45515 affects Tenda W30E router (firmware 1.0.1.25(633)) with a stack overflow in the /goform/addressNat endpoint triggered by the entries parameter. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK access, no privileges, no user interaction, and an impact to availability. The Connect...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2022-45524
CVE-2022-45524 affects Tenda W30E, specifically version 1.0.1.25(633). The issue is a stack overflow discovered in the opttype parameter exposed via the /goform/IPSECsave API. CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, no privileges required, no user interaction. Impact is listed ...
Tenda W30E 操作系统命令注入漏洞
The Tenda W30E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W30E version V1.0.1.25633, which originates from a command injection vulnerability via the fileNameMit parameter of /goform/delFileName...
CVE-2022-45505
The CVE-2022-45505 issue affects Tenda W30E, version 1.0.1.25(633), where a stack overflow is triggered by the cmdinput parameter at the /goform/exeCommand API endpoint. This is a network-accessible vulnerability with low attack complexity and no privileges required, potentially impacting availab...
CVE-2022-45511
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the opttype parameter via /goform/IPSECsave...
CVE-2022-45508
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the newaccount parameter at /goform/editUserName...