deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-37066
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/15; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/15
CVE: CVE-2022-37067
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/17; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/17
CVE: CVE-2022-37068
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/14; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/14
CVE: CVE-2022-37069
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/12; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/12
CVE: CVE-2022-37070
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/19; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/19
CVE: CVE-2022-37071
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/18; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/18
CVE: CVE-2022-37072
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/16; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/16
CVE: CVE-2022-37073
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/13; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/13
CVE: CVE-2022-37074
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/11; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/11
CVE: CVE-2022-37075
Published: 2022-08-25
Description: TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/7; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/7
CVE: CVE-2022-37076
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/4; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/4
CVE: CVE-2022-22728
Published: 2022-08-25
Description: A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: http://www.openwall.com/lists/oss-security/2022/08/25/3; http://www.openwall.com/lists/oss-security/2022/08/25/4; http://www.openwall.com/lists/oss-security/2022/08/26/4
CVE: CVE-2022-36455
Published: 2022-08-25
Description: TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3600R/1/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3600R/1/readme.md
CVE: CVE-2022-37077
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/9; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/9
CVE: CVE-2022-37078
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/6; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/6
CVE: CVE-2022-37079
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/5; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/5
CVE: CVE-2022-37080
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/8; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/8
CVE: CVE-2022-37081
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/2; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/2
CVE: CVE-2022-37082
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/3; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/3
CVE: CVE-2022-37083
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/1; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/1
CVE: CVE-2022-37084
Published: 2022-08-25
Description: TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/10; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/10
CVE: CVE-2022-37085
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/9; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/9
CVE: CVE-2022-37086
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/3; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/3
CVE: CVE-2022-37087
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/6; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/6
CVE: CVE-2022-37088
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/4; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/4
CVE: CVE-2022-37089
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/2; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/2
CVE: CVE-2022-37090
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/8; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/8
CVE: CVE-2022-37091
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/10; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/10
CVE: CVE-2022-37092
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/5; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/5
CVE: CVE-2022-37093
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/1; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/1
CVE: CVE-2022-37094
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/7; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/7
CVE: CVE-2022-37095
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/16; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/16
CVE: CVE-2022-37096
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/11; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/11
CVE: CVE-2022-37097
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/13; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/13
CVE: CVE-2022-37098
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/12; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/12
CVE: CVE-2022-37099
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/14; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/14
CVE: CVE-2022-37100
Published: 2022-08-25
Description: H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/15; https://github.com/Darry-lang1/vuln/tree/main/H3C/H200/15
CVE: CVE-2022-37239
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37240
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/HTTP-Response-splitting-through-format-parameter.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37241
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-data_leak_list_ajax-endpoint.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37242
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/HTTP-Response-splitting-through-DATA-parameter.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37243
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-whitelist-endpoint.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37244
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/IFRAME-Injection-at-currentRequest-Parameter.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37245
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-Blacklist-endpoint.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37798
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/5; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/5
CVE: CVE-2022-37799
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/2; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/2
CVE: CVE-2022-37800
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/7; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/7
CVE: CVE-2022-37801
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/9; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/9
CVE: CVE-2022-37802
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/6; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/6
CVE: CVE-2022-37803
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/8; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/8
CVE: CVE-2022-37804
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/3; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/3
CVE: CVE-2022-37805
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/1; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/1
CVE: CVE-2022-37806
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/4; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/4
CVE: CVE-2022-37807
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/10; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/10
CVE: CVE-2022-37808
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/15; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/15
CVE: CVE-2022-37809
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/11; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/11
CVE: CVE-2022-37810
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/19; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/19
CVE: CVE-2022-37811
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/17; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/17
CVE: CVE-2022-37812
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/12; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/12
CVE: CVE-2022-37813
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/16; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/16
CVE: CVE-2022-37814
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/14; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/14
CVE: CVE-2022-37815
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/18; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/18
CVE: CVE-2022-37816
Published: 2022-08-25
Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/13; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/13
CVE: CVE-2022-37817
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/4; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/4
CVE: CVE-2022-37818
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/2; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/2
CVE: CVE-2022-37819
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/7; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/7
CVE: CVE-2022-37820
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/8; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/8