CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-45499
https://notcve.org/view.php?id=CVE-2022-45499
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet. Se descubrió que Tenda W6-S v1.0.0.4(510) contenía un desbordamiento de pila a través del parámetro wl_radio en /goform/WifiMacFilterGet. • https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/WifiMacFilterGet/readme.md • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-45504
https://notcve.org/view.php?id=CVE-2022-45504
An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device. Un problema en el componente tpi_systool_handle(0) (/goform/SysToolRestoreSet) de Tenda W6-S v1.0.0.4(510) permite a atacantes no autenticados reiniciar arbitrariamente el dispositivo. • https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/SysToolRestoreSet/readme.md •
CVSS: 9.8EPSS: 5%CPEs: 2EXPL: 1CVE-2022-45497
https://notcve.org/view.php?id=CVE-2022-45497
Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand. • https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/exeCommand/readme.md • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-45503
https://notcve.org/view.php?id=CVE-2022-45503
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing. Se descubrió que Tenda W6-S v1.0.0.4(510) contenía un desbordamiento de pila a través del parámetro linkEn en /goform/setAutoPing. • https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/setAutoPing/readme.md • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-45498
https://notcve.org/view.php?id=CVE-2022-45498
An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device. Un problema en el componente tpi_systool_handle(0) (/goform/SysToolReboot) de Tenda W6-S v1.0.0.4(510) permite a atacantes no autenticados reiniciar arbitrariamente el dispositivo. • https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W6-S/SysToolReboot/readme.md •