Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda China.Tenda W6 is vulnerable to a stack overflow vulnerability caused by a stack buffer overflow in the function wifiSSIDget. A remote attacker can exploit this vulnerability to cause a denial of service...

Tenda W6 操作系统命令注入漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda, China.A command injection vulnerability exists in Tenda W6 /goform/exeCommand, which can be exploited by attackers to execute arbitrary commands on the system...

CVE-2022-35561

A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35561

CVE-2022-35561 is a stack overflow vulnerability in the /goform/WifiMacFilterSet endpoint of Tenda W6 version 1.0.0.9(4122) . The issue, described across multiple sources (NVD, Red Hat, CNVD, CVE list), allows remote attackers to cause a denial of service via the index parameter. The Red Hat entr...

CVE-2022-35560

A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35560

CVE-2022-35560 affects Tenda W6, version 1.0.0.9(4122). A stack overflow in the API endpoint "/goform/wifiSSIDset" can be triggered via the index parameter to cause a DoS. Public sources confirm the vulnerable component and impact but do not provide a confirmed patch version. Workarounds describe...

CVE-2022-35559

A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.94122, which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution...

CVE-2022-35559

CVE-2022-35559 is a stack overflow in Tenda W6’s /goform/setAutoPing (v1.0.0.9(4122)) that could allow a remote attacker to trigger arbitrary code execution. Multiple sources (NVD, Red Hat, CNVD, PT Security) describe a vulnerability in the setAutoPing endpoint causing buffer overflow. The primar...

CVE-2022-35558

The CVE-2022-35558 entry concerns Tenda W6 (V1.0.0.9(4122)) with a stack overflow in the WifiMacFilterGet function. The vulnerability allows remote attackers to cause a denial of service via the index parameter. Affected component is the WifiMacFilterGet path under /goform/ on the Tenda W6 device...

CVE-2022-35558

A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35557

A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

CVE-2022-35557

CVE-2022-35557 affects Tenda W6, specifically the /goform/wifiSSIDget API in firmware version 1.0.0.9(4122). The vulnerability is a stack overflow in wifiSSIDget triggered via the index parameter, which can cause a denial of service. Documents consistently describe a DoS impact but do not provide...

CVE-2022-35555

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

CVE-2022-35555

The CVE-2022-35555 issue affects Tenda W6, specifically version 1.0.0.9(4122). A command injection exists in the /goform/exeCommand API, enabling attackers to craft cmdinput parameters for arbitrary command execution. CVSSv3.1: 9.8 (CRITICAL), network access, no user interaction. Practical impact...

PT-2022-22904 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A stack overflow issue exists, which can be exploited to cause a denial of service DoS via the index parameter in the "/goform/wifiSSIDset" API endpoint. Recommendations: For Tenda W6 version...

PT-2022-22903 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A stack overflow issue exists in the /goform/setAutoPing API endpoint, allowing an attacker to construct ping1 and ping2 parameters for a stack overflow attack, potentially leading to arbitrary code...

PT-2022-22905 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A stack overflow issue exists in the /goform/WifiMacFilterSet endpoint, which can be exploited by attackers to cause a denial of service DoS via the index parameter. Recommendations: For Tenda W6...

PT-2022-22901 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A stack overflow issue exists in the "/goform/wifiSSIDget" API endpoint, which can be exploited by attackers to cause a denial of service DoS via the index parameter. Recommendations: For Tenda W6...