deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-21733
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on `pad_witdh` and that result in computing a negative value for `ngram_width` which is later used to allocate parts of the output. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/string_ngrams_op.cc#L29-L161; https://github.com/tensorflow/tensorflow/commit/f68fdab93fb7f4ddb4eb438c8fe052753c9413e8; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98j8-c9q4-r38g
CVE: CVE-2022-21736
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it can be made to dereference a `nullptr` value. The 3 input arguments to `SparseTensorSliceDataset` represent a sparse tensor. However, there are some preconditions that these arguments must satisfy but these are not validated in the implementation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 7.6 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L227-L292; https://github.com/tensorflow/tensorflow/commit/965b97e4a9650495cda5a8c210ef6684b4b9eceb; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pfjj-m3jj-9jc9
CVE: CVE-2022-23567
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to integer overflows. These can be used to trigger large allocations (so, OOM based denial of service) or `CHECK`-fails when building new `TensorShape` objects (so, assert failures based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_dense_binary_op_shared.cc; https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md; https://github.com/tensorflow/tensorflow/commit/1b54cadd19391b60b6fcccd8d076426f7221d5e8
CVE: CVE-2022-23568
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySparseToTensorsMap` is vulnerable to an integer overflow which results in a `CHECK`-fail when building new `TensorShape` objects (so, an assert failure based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_tensors_map_ops.cc; https://github.com/tensorflow/tensorflow/commit/a68f68061e263a88321c104a6c911fe5598050a8; https://github.com/tensorflow/tensorflow/commit/b51b82fe65ebace4475e3c54eb089c18a4403f1c
CVE: CVE-2022-21725
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure it is valid. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/tensorflow/tensorflow/blob/ffa202a17ab7a4a10182b746d230ea66f021fe16/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L189-L198; https://github.com/tensorflow/tensorflow/commit/3218043d6d3a[PII_REDACTED]43cf65574fbfef5d7a; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v3f7-j968-4h5f
CVE: CVE-2022-21729
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `UnravelIndex` is vulnerable to a division by zero caused by an integer overflow bug. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/unravel_index_op.cc#L36-L135; https://github.com/tensorflow/tensorflow/commit/58b34c6c[PII_REDACTED]b5a781b426f6aa01fd47af; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-34f9-hjfq-rr8j
CVE: CVE-2022-21734
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/map_stage_op.cc#L519-L550; https://github.com/tensorflow/tensorflow/commit/f57315566d7094f322b[PII_REDACTED]06c2aea0d7d; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gcvh-66ff-4mwm
CVE: CVE-2022-21735
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalMaxPool` can be made to crash a TensorFlow process via a division by 0. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_max_pool_op.cc#L36-L192; https://github.com/tensorflow/tensorflow/commit/ba4e8ac4dc2991e350d5cc407f8598c8d4ee70fb; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-87v6-crgm-2gfj
CVE: CVE-2022-23569
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e., assertion failures). This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. It is possible that other similar instances exist in TensorFlow, we will issue fixes as these are discovered. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617, CWE-617
References: https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qj5r-f9mv-rffh; https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md
CVE: CVE-2021-44866
Published: 2022-02-03
Description: An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/projectworldsofficial/Online-Movie-Ticket-Booking-System-in-php/issues/6; https://github.com/projectworldsofficial/Online-Movie-Ticket-Booking-System-in-php/issues/6
CVE: CVE-2022-21737
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by passing in arguments which would trigger a `CHECK`-fail. There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in `CHECK` failures later when the output tensors get allocated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc; https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2vv-v9cg-qhh7
CVE: CVE-2022-21738
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273; https://github.com/tensorflow/tensorflow/commit/6f4d3e8139ec724dbbcb40505891c81dd1052c4a; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x4qx-4fjv-hmw6
CVE: CVE-2022-21739
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/quantized_pooling_ops.cc#L114-L130; https://github.com/tensorflow/tensorflow/commit/53b0dd6dc5957652f35964af16b892ec9af4a559; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3mw4-6rj6-74g5
CVE: CVE-2022-21740
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273; https://github.com/tensorflow/tensorflow/commit/2b7100d6cdff36aa21010a82269bc05a6d1cc74a; https://github.com/tensorflow/tensorflow/commit/adbbabdb0d3abb3cdeac69e38a96de1d678b24b3
CVE: CVE-2022-21741
Published: 2022-02-03
Description: Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution can be user controlled and are also used within a division operation to determine the size of the padding that needs to be added before applying the convolution. There is no check before this division that the divisor is strictly positive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/depthwise_conv.cc#L96; https://github.com/tensorflow/tensorflow/commit/e5b0eec199c2d03de54fd6a7fd[PII_REDACTED]e2bc; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-428x-9xc2-m8mj
CVE: CVE-2022-24307
Published: 2022-02-03
Description: Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://github.com/mastodon/mastodon/releases/tag/v3.3.2; https://github.com/mastodon/mastodon/releases/tag/v3.4.6; https://github.com/mastodon/mastodon/releases/tag/v3.3.2
CVE: CVE-2021-45268
Published: 2022-02-03
Description: A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cookie of a high-privileged authenticated user who is entitled to install arbitrary add-ons
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/V1n1v131r4/CSRF-to-RCE-on-Backdrop-CMS; https://www.exploit-db.com/exploits/50323; https://github.com/V1n1v131r4/CSRF-to-RCE-on-Backdrop-CMS
CVE: CVE-2021-44246
Published: 2022-02-04
Description: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IpTo parameter.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_2/2.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_2/2.md
CVE: CVE-2021-44247
Published: 2022-02-04
Description: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_1/1.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_1/1.md
CVE: CVE-2021-44880
Published: 2022-02-04
Description: D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_2/2.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10286; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287
CVE: CVE-2021-44881
Published: 2022-02-04
Description: D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_3/3.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-44882
Published: 2022-02-04
Description: D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_1/1.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10286; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-45733
Published: 2022-02-04
Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_7/7.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_7/7.md
CVE: CVE-2021-45734
Published: 2022-02-04
Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via the url parameter.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_10/10.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_10/10.md
CVE: CVE-2021-45735
Published: 2022-02-04
Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_12/12.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_12/12.md
CVE: CVE-2021-45736
Published: 2022-02-04
Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the eip, sip, server parameters.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_9/9.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_9/9.md
CVE: CVE-2021-45737
Published: 2022-02-04
Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host parameter.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_6/6.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_6/6.md
CVE: CVE-2021-45738
Published: 2022-02-04
Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_8/8.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_8/8.md
CVE: CVE-2021-45739
Published: 2022-02-04
Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the flag parameter.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_5/5.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_5/5.md
CVE: CVE-2021-45740
Published: 2022-02-04
Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin parameter.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_4/4.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_4/4.md
CVE: CVE-2021-45741
Published: 2022-02-04
Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the relay6to4 parameters.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_11/11.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_11/11.md
CVE: CVE-2021-45742
Published: 2022-02-04
Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_3/3.md; https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_3/3.md
CVE: CVE-2021-45986
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_2/2.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/218962; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_2/2.md
CVE: CVE-2021-45987
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_3/3.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/218961; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_3/3.md
CVE: CVE-2021-45988
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsForwardRule parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_5/5.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/218960; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_5/5.md
CVE: CVE-2021-45989
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qosGuestUpstream and qosGuestDownstream parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_4/4.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/218959; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_4/4.md