CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

CVE-2022-45497

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

PT-2022-27543 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered via the wl radio parameter at the "/goform/WifiMacFilterGet" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider restricting access to the...

CVE-2022-45501

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

PT-2022-27545 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered, which can be triggered via the linkEn parameter at the "/goform/setAutoPing" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, avoid using the...

Tenda W6 缓冲区错误漏洞

The Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which is caused by a stack overflow in the linkEn parameter via /goform/setAutoPing...

Tenda W6 缓冲区错误漏洞

Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2022-45499

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/WifiMacFilterGet...

Tenda W6 安全漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S version v1.0.0.4510, which stems from an issue with component tpisystoolhandle0 /goform/SysToolRestoreSet that allows an unauthenticated attacker to arbitrarily reboot the device...

Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which originates from a stack overflow via the wlradio parameter in /goform/wifiSSIDset...

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

PT-2022-27546 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: The issue affects the component tpi systool handle0 and is related to the API endpoint /goform/SysToolRestoreSet. This allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45498

CVE-2022-45498 affects Tenda W6-S v1.0.0.4(510). The vulnerability lies in the tpi_systool_handle(0) function handling the /goform/SysToolReboot endpoint, allowing unauthenticated attackers to arbitrarily reboot the device (impact: availability). CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/...

CVE-2022-45497

CVE-2022-45497 affects Tenda W6-S v1.0.0.4(510). The vulnerability is a command injection in the tpi_get_ping_output function exposed at the /goform/exeCommand API endpoint. The CVSS 3.1 vector indicates network attack, no user interaction, with high impact to confidentiality, integrity, and avai...

CVE-2022-45503

CVE-2022-45503 relates to a stack overflow in Tenda W6-S v1.0.0.4(510), exploitable via the linkEn parameter in the /goform/setAutoPing endpoint. NVD CVSS v3.1 base score 7.5 (HIGH), network attack vector, no user interaction required. The issue stems from an input handling flaw in the linkEn par...

CVE-2022-45499

CVE-2022-45499 affects Tenda W6-S router, firmware v1.0.0.4(510). The vulnerability is a stack overflow triggered by the wl_radio parameter in the /goform/WifiMacFilterGet API. Impact per the sources indicates availability disruption (DoS) with high severity. The documents do not provide a confir...

CVE-2022-45504

CVE-2022-45504 affects Tenda W6-S v1.0.0.4(510). The issue exists in tpi_systool_handle(0) via the /goform/SysToolRestoreSet endpoint, allowing unauthenticated attackers to reboot the device. Impact is availability disruption; no confidentiality/integrity impact indicated. Evidence from multiple ...

CVE-2022-45501

CVE-2022-45501 affects Tenda W6-S v1.0.0.4(510). The vulnerability is a stack overflow in the wl_radio parameter exposed via the /goform/wifiSSIDset endpoint. CVSS v3.1 vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H with a base score of 7.5 (HIGH); exploit requires no authentication and no user int...

Command injection

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router with GPS4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG /...