Tenda

W15e Firmware

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-4117

Exploit
  • EPSS 0.26%
  • Veröffentlicht 24.04.2024 16:15:10
  • Zuletzt bearbeitet 15.01.2025 18:42:42

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file /goform/DelPortMapping. The manipulation of the argument portMappingIndex leads to stack-based buffer...

8.8

CVE-2024-4116

Exploit
  • EPSS 0.24%
  • Veröffentlicht 24.04.2024 16:15:10
  • Zuletzt bearbeitet 15.01.2025 18:42:30

A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file /goform/DelDhcpRule. The manipulation of the argument delDhcpIndex leads to stack-based buf...

8.8

CVE-2024-4115

Exploit
  • EPSS 0.15%
  • Veröffentlicht 24.04.2024 16:15:10
  • Zuletzt bearbeitet 15.01.2025 18:42:08

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsForward. The manipulation of the argument DnsForwardRule leads to stack-based buffer overflow....

7.5

CVE-2023-27065

Exploit
  • EPSS 0.33%
  • Veröffentlicht 13.03.2023 14:15:13
  • Zuletzt bearbeitet 27.02.2025 21:15:19

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted reques...

7.5

CVE-2023-27064

Exploit
  • EPSS 0.33%
  • Veröffentlicht 13.03.2023 14:15:13
  • Zuletzt bearbeitet 27.02.2025 21:15:19

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted reques...

9.8

CVE-2023-27063

Exploit
  • EPSS 1.02%
  • Veröffentlicht 13.03.2023 14:15:13
  • Zuletzt bearbeitet 27.02.2025 21:15:19

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a cra...

7.5

CVE-2023-27062

Exploit
  • EPSS 0.33%
  • Veröffentlicht 13.03.2023 14:15:13
  • Zuletzt bearbeitet 27.02.2025 21:15:19

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

9.8

CVE-2023-27061

Exploit
  • EPSS 0.8%
  • Veröffentlicht 13.03.2023 14:15:13
  • Zuletzt bearbeitet 27.02.2025 21:15:19

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) v...

7.5

CVE-2017-14514

  • EPSS 0.41%
  • Veröffentlicht 17.09.2017 22:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.

7.5

CVE-2017-14515

  • EPSS 0.65%
  • Veröffentlicht 17.09.2017 22:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors.