PT-2022-27555 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/P2pListFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider...

CVE-2022-45513

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/L7Im...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the PPPOEPassword parameter of /goform/QuickIndex...

CVE-2022-45512

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter...

CVE-2022-45512

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter...

CVE-2022-45523

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/L7Im...

CVE-2022-45505

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand...

CVE-2022-45511

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

PT-2022-27553 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the PPPOEPassword parameter at the "/goform/QuickIndex" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, avoid using the PPPOEPassword...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow contained in the editNameMit parameter via /goform/editFileName...

CVE-2022-45517: Out-of-bounds Write

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/SafeClientFilter...

CVE-2022-45518

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

CVE-2022-45514

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter...

CVE-2022-45510

CVE-2022-45510 affects Tenda W30E (V1.0.1.25(633)). A stack overflow is triggered via the mit_ssid_index parameter in /goform/AdvSetWrlsafeset. The affected component is the web UI/firmware handling mit_ssid_index; root cause is a stack overflow condition. Documented impact is a denial of service...

CVE-2022-45512

CVE-2022-45512 affects Tenda W30E with V1.0.1.25(633). Affects the /goform/SafeEmailFilter endpoint where the stack overflow is triggered via the page parameter, leading to potential denial of service. Documented impact in CVSS indicates NETWORK attack vector, LOW complexity, NONE privileges, wit...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the newaccount parameter of /goform/editUserName...

CVE-2022-45525

CVE-2022-45525 affects Tenda W30E router (version 1.0.1.25(633)). A stack overflow is triggered by the downaction parameter in /goform/CertListInfo. CVSSv3.1 base score 7.5 (HIGH); network access, no user interaction required. The available sources describe a likely crash/partial impact; no offic...

CVE-2022-45511

CVE-2022-45511 affects Tenda W30E V1.0.1.25(633). A stack overflow is triggered via the PPPOEPassword parameter at the /goform/QuickIndex API endpoint. Reported impact is high (availability impact), with network-exploitability and no privileges required. A PoC exists and may be automatable per th...