CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

PT-2022-27545 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A stack overflow issue was discovered, which can be triggered via the linkEn parameter at the "/goform/setAutoPing" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, avoid using the...

PT-2022-27542 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: The issue affects the component tpi systool handle0 and is related to the API endpoint /goform/SysToolReboot. This allows unauthenticated attackers to arbitrarily reboot the device. Recommendations:...

CVE-2022-45503

CVE-2022-45503 relates to a stack overflow in Tenda W6-S v1.0.0.4(510), exploitable via the linkEn parameter in the /goform/setAutoPing endpoint. NVD CVSS v3.1 base score 7.5 (HIGH), network attack vector, no user interaction required. The issue stems from an input handling flaw in the linkEn par...

Tenda W6 操作系统命令注入漏洞

Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

CVE-2022-45497

CVE-2022-45497 affects Tenda W6-S v1.0.0.4(510). The vulnerability is a command injection in the tpi_get_ping_output function exposed at the /goform/exeCommand API endpoint. The CVSS 3.1 vector indicates network attack, no user interaction, with high impact to confidentiality, integrity, and avai...

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

CVE-2022-45498

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which originates from a stack overflow via the wlradio parameter in /goform/wifiSSIDset...

CVE-2022-45504

CVE-2022-45504 affects Tenda W6-S v1.0.0.4(510). The issue exists in tpi_systool_handle(0) via the /goform/SysToolRestoreSet endpoint, allowing unauthenticated attackers to reboot the device. Impact is availability disruption; no confidentiality/integrity impact indicated. Evidence from multiple ...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Tenda W6 安全漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S version v1.0.0.4510, which stems from an issue with component tpisystoolhandle0 /goform/SysToolRestoreSet that allows an unauthenticated attacker to arbitrarily reboot the device...

CVE-2022-45499

CVE-2022-45499 affects Tenda W6-S router, firmware v1.0.0.4(510). The vulnerability is a stack overflow triggered by the wl_radio parameter in the /goform/WifiMacFilterGet API. Impact per the sources indicates availability disruption (DoS) with high severity. The documents do not provide a confir...

CVE-2022-45501

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

CVE-2022-45497

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

PT-2022-27541 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A command injection issue was found in the tpi get ping output function at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider disabling the tpi get pi...

Tenda W6 缓冲区错误漏洞

The Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which is caused by a stack overflow in the linkEn parameter via /goform/setAutoPing...

CVE-2022-45498

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45501

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the wlradio parameter at /goform/wifiSSIDset...

Tenda W6 缓冲区错误漏洞

Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...