PT-2022-27555 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/P2pListFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider...

PT-2022-27557 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the entries parameter at the "/goform/addressNat" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...

PT-2022-27566 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the opttype parameter at the "/goform/IPSECsave" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider...

PT-2022-27564 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SafeClientFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, avoid using the page parameter in th...

PT-2022-27550 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the new account parameter at the "/goform/editUserName" API endpoint. This issue affects the specified version of the Tenda W30E device. Recommendations: Fo...

PT-2022-27562 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/qossetting" API endpoint. This issue affects the Tenda W30E device. Recommendations: For Tenda W30E version 1.0.1.25633, ...

PT-2022-27563 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SafeUrlFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider...

CVE-2022-45520

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...

CVE-2022-45521

CVE-2022-45521 affects the Tenda W30E router (version 1.0.1.25(633)) and is caused by a stack overflow triggered by the page parameter in the /goform/SafeUrlFilter endpoint. The vulnerability is described as allowing an overflow with potential impact to availability (CVSS v3.1: 7.5, NETWORK attac...

CVE-2022-45522

The CVE-2022-45522 entry concerns Tenda W30E, version 1.0.1.25(633). The vulnerability is a stack overflow triggered by the page parameter in the /goform/SafeClientFilter endpoint. Per available sources, exploitation pompt exists (PoC noted in the ADP entry), and the CVSS v3.1 metrics indicate Ne...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45525

CVE-2022-45525 affects Tenda W30E router (version 1.0.1.25(633)). A stack overflow is triggered by the downaction parameter in /goform/CertListInfo. CVSSv3.1 base score 7.5 (HIGH); network access, no user interaction required. The available sources describe a likely crash/partial impact; no offic...

PT-2022-27548 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A command injection issue was discovered via the fileNameMit parameter at the "/goform/delFileName" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda W30E...

CVE-2022-45520

CVE-2022-45520 affects the Tenda W30E router with firmware version 1.0.1.25(633). The vulnerability is a stack overflow exploitable via the page parameter at the API endpoint “/goform/qossetting.” The NVD/CVE data describe a network-accessible issue with a base CVSS v3.1 score of 7.5 (High) and n...

CVE-2022-45514

CVE-2022-45514 affects the Tenda W30E router (version 1.0.1.25(633)). A vulnerability in the /goform/webExcptypemanFilter endpoint allows a stack overflow triggered via the page parameter, leading to denial of service. Documented impact in CVSS: high, network-exploit reachable without privileges,...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow contained in the editNameMit parameter via /goform/editFileName...

CVE-2022-45520

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...