Tenda

Ch22

40 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.4

CVE-2026-77031

Exploit
  • EPSS -
  • Veröffentlicht 20.08.2026 17:15:09
  • Zuletzt bearbeitet 20.08.2026 19:17:04

A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated...

9

CVE-2026-19346

Exploit
  • EPSS 2.22%
  • Veröffentlicht 09.08.2026 10:00:10
  • Zuletzt bearbeitet 12.08.2026 20:59:21

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. Th...

9

CVE-2026-15543

Exploit
  • EPSS 0.48%
  • Veröffentlicht 13.07.2026 07:15:09
  • Zuletzt bearbeitet 13.07.2026 19:17:01

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been ...

9.8

CVE-2026-5962

Exploit
  • EPSS 0.54%
  • Veröffentlicht 09.04.2026 17:16:35
  • Zuletzt bearbeitet 30.04.2026 15:38:43

A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public ...

9

CVE-2026-5605

Exploit
  • EPSS 0.69%
  • Veröffentlicht 05.04.2026 23:15:12
  • Zuletzt bearbeitet 24.07.2026 09:10:00

A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely....

9

CVE-2026-5604

Exploit
  • EPSS 0.67%
  • Veröffentlicht 05.04.2026 22:45:12
  • Zuletzt bearbeitet 24.07.2026 20:10:00

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard resul...

9

CVE-2026-5204

Exploit
  • EPSS 2.48%
  • Veröffentlicht 31.03.2026 15:45:13
  • Zuletzt bearbeitet 24.07.2026 20:10:00

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. T...

8.8

CVE-2026-5156

Exploit
  • EPSS 0.63%
  • Veröffentlicht 30.03.2026 23:30:15
  • Zuletzt bearbeitet 02.04.2026 12:07:05

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mit_linktype causes stack-based buffer overflow. The a...

8.8

CVE-2026-5155

Exploit
  • EPSS 0.77%
  • Veröffentlicht 30.03.2026 22:30:18
  • Zuletzt bearbeitet 02.04.2026 12:08:50

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can...

8.8

CVE-2026-5154

Exploit
  • EPSS 0.63%
  • Veröffentlicht 30.03.2026 22:30:14
  • Zuletzt bearbeitet 30.04.2026 19:10:22

A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. ...