Tenda W15E any version

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda W15E guestWifiRuleRefresh stack-based overflow

Tenda W15E SetSysTimeCfg formSetSysTime stack-based overflow

Tenda W15E setStaticRoute formSetStaticRoute stack-based overflow

Tenda W15E SetPortMapping formSetPortMapping stack-based overflow

Tenda W15E setDebugCfg formSetDebugCfg stack-based overflow

Tenda W15E formQOSRuleDel stack-based overflow

Tenda W15E modifyIpMacBind formIPMacBindModify stack-based overflow

Tenda W15E delIpMacBind formIPMacBindDel stack-based overflow

Tenda W15E addIpMacBind formIPMacBindAdd stack-based overflow

Tenda W15E DelPortMapping formDelPortMapping stack-based overflow

Tenda W15E DelDhcpRule formDelDhcpRule stack-based overflow

Tenda W15E AddDnsForward formAddDnsForward stack-based overflow

Tenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.

Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors.

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and potential remote administrative access.

Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.