Tenda

Ch22 Firmware

30 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-9812

Exploit
  • EPSS 0.27%
  • Veröffentlicht 02.09.2025 03:02:10
  • Zuletzt bearbeitet 04.09.2025 17:01:04

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executing manipulation of the argument cmdinput can lead to buffer overflow. The attack may be performed from...

9.8

CVE-2025-9748

Exploit
  • EPSS 0.22%
  • Veröffentlicht 31.08.2025 22:02:07
  • Zuletzt bearbeitet 04.09.2025 16:45:49

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. T...

9

CVE-2025-9443

Exploit
  • EPSS 0.26%
  • Veröffentlicht 26.08.2025 02:32:08
  • Zuletzt bearbeitet 02.09.2025 18:13:49

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument new_account can lead to buffer overflow. It is possible to launch the attac...

9

CVE-2025-9007

Exploit
  • EPSS 0.26%
  • Veröffentlicht 15.08.2025 03:32:07
  • Zuletzt bearbeitet 26.09.2025 12:30:15

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been discl...

9

CVE-2025-9006

Exploit
  • EPSS 0.26%
  • Veröffentlicht 15.08.2025 03:02:14
  • Zuletzt bearbeitet 26.09.2025 12:30:03

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been...

9

CVE-2025-8180

  • EPSS 0.35%
  • Veröffentlicht 26.07.2025 06:32:06
  • Zuletzt bearbeitet 05.08.2025 19:21:13

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation of the argument old_account leads to buffer overfl...

9.8

CVE-2025-5685

Exploit
  • EPSS 0.31%
  • Veröffentlicht 05.06.2025 20:00:18
  • Zuletzt bearbeitet 10.06.2025 15:01:39

A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the function formNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to ini...

9.8

CVE-2025-5619

Exploit
  • EPSS 0.54%
  • Veröffentlicht 04.06.2025 23:00:24
  • Zuletzt bearbeitet 06.06.2025 20:12:05

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. ...

9.8

CVE-2024-46045

Exploit
  • EPSS 0.34%
  • Veröffentlicht 13.09.2024 14:15:14
  • Zuletzt bearbeitet 15.10.2024 14:35:06

Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.

9.8

CVE-2024-46044

Exploit
  • EPSS 0.11%
  • Veröffentlicht 13.09.2024 14:15:13
  • Zuletzt bearbeitet 20.09.2024 00:34:08

CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.