deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-45990
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the pic_name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_1/1.md; https://www.tenable.com/cve/CVE-2021-45990; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_1/1.md
CVE: CVE-2021-45991
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service (DoS) via the vpnUsers parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_6/6.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/218954; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_6/6.md
CVE: CVE-2021-45992
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qvlanName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_7/7.md; https://www.tenable.com/cve/CVE-2021-45992; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_7/7.md
CVE: CVE-2021-45993
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_10/10.md; https://www.tenable.com/cve/CVE-2021-45993; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_10/10.md
CVE: CVE-2021-45994
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the delDhcpIndex parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_12/12.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/218934; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_12/12.md
CVE: CVE-2021-45995
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service (DoS) via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_9/9.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_9/9.md
CVE: CVE-2021-45996
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_8; https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_8
CVE: CVE-2021-45997
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_11/11.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_11/11.md
CVE: CVE-2021-45998
Published: 2022-02-04
Description: D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_4/4.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46226
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_9/9.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46227
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows attackers to execute arbitrary commands via the proxy_srv, proxy_srvport, proxy_lanip, proxy_lanport parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_10/10.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46228
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_6/6.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46229
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_11/11.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46230
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_7/7.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46231
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp. This vulnerability allows attackers to execute arbitrary commands via the url_en parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_5/5.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46232
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_8/8.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46233
Published: 2022-02-04
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm. This vulnerability allows attackers to execute arbitrary commands via the cmd parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_12/12.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46452
Published: 2022-02-04
Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_27/27.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46453
Published: 2022-02-04
Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability allows attackers to execute arbitrary commands via the staticroute_list parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_25/25.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46454
Published: 2022-02-04
Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability allows attackers to execute arbitrary commands via the ApCliKeyStr parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_24/24.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46455
Published: 2022-02-04
Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the station_access_enable parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_22/22.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46456
Published: 2022-02-04
Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl(0).(0)_maclist parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_26/26.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-46457
Published: 2022-02-04
Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability allows attackers to execute arbitrary commands via the samba_name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_23/23.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-24142
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the firewallEn parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_22/22.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_22/22.md
CVE: CVE-2022-24143
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_17/17.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_17/17.md
CVE: CVE-2022-24144
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_13; https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_13
CVE: CVE-2022-24145
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of Service (DoS) via the security and security_5g parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_19/19.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_19/19.md
CVE: CVE-2022-24146
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_16/16.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_16/16.md
CVE: CVE-2022-24147
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_18/18.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_18/18.md
CVE: CVE-2022-24148
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_14/14.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_14/14.md
CVE: CVE-2022-24149
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wpapsk_crypto parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_20/20.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_20/20.md
CVE: CVE-2022-24150
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_15/15.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_15/15.md
CVE: CVE-2022-24151
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the shareSpeed parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_21/21.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_21/21.md
CVE: CVE-2022-24152
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_33/33.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_33/33.md
CVE: CVE-2022-24153
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_34/34.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_34/34.md
CVE: CVE-2022-24154
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the rebootTime parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_30/30.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_30/30.md
CVE: CVE-2022-24155
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the schedStartTime and schedEndTime parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_25/25.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_25/25.md
CVE: CVE-2022-24156
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_29/29.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_29/29.md
CVE: CVE-2022-24157
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceList parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_31/31.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_31/31.md
CVE: CVE-2022-24158
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_23/23.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_23/23.md
CVE: CVE-2022-24159
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_28/28.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_28/28.md
CVE: CVE-2022-24160
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_32/32.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_32/32.md
CVE: CVE-2022-24161
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_26/26.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_26/26.md
CVE: CVE-2022-24162
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_27/27.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_27/27.md
CVE: CVE-2022-24163
Published: 2022-02-04
Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_24; https://github.com/pjqwudi/my_vuln/tree/main/Tenda/vuln_24
CVE: CVE-2022-24164
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_40/40.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_40/40.md
CVE: CVE-2022-24165
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_38/38.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_38/38.md
CVE: CVE-2022-24166
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_42/42.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_42/42.md
CVE: CVE-2022-24167
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_39/39.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_39/39.md
CVE: CVE-2022-24168
Published: 2022-02-04
Description: Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_37/37.md; https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_37/37.md