618 matches found
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/SetIpBind...
CVE-2022-45513
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...
CVE-2022-45518
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...
PT-2022-27561 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the Go parameter at the "/goform/SafeMacFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider...
PT-2022-27556 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the page parameter at the "/goform/webExcptypemanFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...
CVE-2022-45524
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave...
CVE-2022-45525
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...
CVE-2022-45512
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter...
CVE-2022-45524
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave...
CVE-2022-45506
Tenda W30E v1.0.1.25633 was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName...
PT-2022-27565 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/L7Im" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider restricting...
CVE-2022-45512
CVE-2022-45512 affects Tenda W30E with V1.0.1.25(633). Affects the /goform/SafeEmailFilter endpoint where the stack overflow is triggered via the page parameter, leading to potential denial of service. Documented impact in CVSS indicates NETWORK attack vector, LOW complexity, NONE privileges, wit...
CVE-2022-45508
CVE-2022-45508 affects Tenda W30E, version 1.0.1.25(633). The vulnerability is a stack overflow in the /goform/editUserName endpoint triggered via the new_account parameter. The CVSSv3.1 base metrics indicate NETWORK attack vector, LOW complexity, no privileges required, user interaction not requ...
PT-2022-27558 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the page parameter at the "/goform/NatStaticSetting" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...
PT-2022-27547 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the cmdinput parameter at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider restricting access to the...
PT-2022-27549 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the editNameMit parameter at the "/goform/editFileName" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consid...
CVE-2022-45516
CVE-2022-45516 affects Tenda W30E, version 1.0.1.25(633). The issue is a stack overflow triggered by the page parameter on the /goform/NatStaticSetting API. The CVSSv3.1 metrics indicate a NETWORK, low complexity exploit with no privileges and no user interaction, but availability impact is HIGH....