Show filters
145 Total Results
Displaying 91-100 of 145
Sort by:
Attacker Value
Unknown
CVE-2021-45401
Disclosure Date: February 18, 2022 (last updated February 23, 2025)
A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function.
0
Attacker Value
Unknown
CVE-2022-24172
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the addDhcpRules parameter.
0
Attacker Value
Unknown
CVE-2022-24171
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, and pppoeServerEndIP parameters.
0
Attacker Value
Unknown
CVE-2022-24170
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet parameters.
0
Attacker Value
Unknown
CVE-2022-24169
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRule parameter.
0
Attacker Value
Unknown
CVE-2022-24168
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary commands via the IPGroupStartIP and IPGroupEndIP parameters.
0
Attacker Value
Unknown
CVE-2022-24167
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter.
0
Attacker Value
Unknown
CVE-2022-24166
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.
0
Attacker Value
Unknown
CVE-2022-24165
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary commands via the qvlanIP parameter.
0
Attacker Value
Unknown
CVE-2022-24164
Disclosure Date: February 04, 2022 (last updated February 23, 2025)
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter.
0
