PT-2022-27548 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A command injection issue was discovered via the fileNameMit parameter at the "/goform/delFileName" API endpoint. This allows for potential command injection attacks. Recommendations: For Tenda W30E...

PT-2022-27565 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/L7Im" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consider restricting...

CVE-2022-45518

CVE-2022-45518 affects the Tenda W30E router (version 1.0.1.25(633)). The root cause is a stack overflow via the page parameter in the API endpoint /goform/SetIpBind . CVSS 3.1 base score 7.5 (High); attack vector network , complexity low , privileges none , user interaction none ; impact: Availa...

PT-2022-27549 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the editNameMit parameter at the "/goform/editFileName" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, consid...

PT-2022-27551 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the account parameter at the "/goform/addUserName" API endpoint. This issue affects the Tenda W30E device. Recommendations: For Tenda W30E version...

CVE-2022-45519

CVE-2022-45519 affects Tenda W30E V1.0.1.25(633). The vulnerability is a stack overflow via the Go parameter at the /goform/SafeMacFilter endpoint, identified in multiple sources (NVD/Red Hat/PRION). CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileg...

CVE-2022-45507

CVE-2022-45507 affects Tenda W30E v1.0.1.25(633): a stack overflow is triggered via the editNameMit parameter in the /goform/editFileName API endpoint. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no user interaction required. Connected sources indicate potential PoC exploitability (POC...

PT-2022-27567 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the downaction parameter at the "/goform/CertListInfo" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, conside...

PT-2022-27547 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the cmdinput parameter at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider restricting access to the...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the downaction parameter via /goform/CertListInfo...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the Go parameter via /goform/SafeMacFilter...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/SafeUrlFilter...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2022-45525

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/qossetting...

CVE-2022-45522

The CVE-2022-45522 entry concerns Tenda W30E, version 1.0.1.25(633). The vulnerability is a stack overflow triggered by the page parameter in the /goform/SafeClientFilter endpoint. Per available sources, exploitation pompt exists (PoC noted in the ADP entry), and the CVSS v3.1 metrics indicate Ne...