CVE-2023-26805
https://notcve.org/view.php?id=CVE-2023-26805
Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify. • https://github.com/Stevenbaga/fengsha/blob/main/W20E/formIPMacBindModify.md • CWE-787: Out-of-bounds Write •
CVE-2023-26806
https://notcve.org/view.php?id=CVE-2023-26806
Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime, • https://github.com/Stevenbaga/fengsha/blob/main/W20E/SetSysTime.md • CWE-787: Out-of-bounds Write •
CVE-2022-48130
https://notcve.org/view.php?id=CVE-2022-48130
Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN. • https://github.com/Stevenbaga/fengsha/blob/main/W20E/formSetStaticRoute.md • CWE-787: Out-of-bounds Write •
CVE-2022-45997
https://notcve.org/view.php?id=CVE-2022-45997
Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. Tenda W20E V16.01.0.6(3392) es vulnerable al desbordamiento de búfer. • https://github.com/bugfinder0/public_bug/tree/main/tenda/w20e/1 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2022-45996
https://notcve.org/view.php?id=CVE-2022-45996
Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output. Tenda W20E V16.01.0.6(3392) es vulnerable a la inyección de comandos a través de cmd_get_ping_output. • https://github.com/bugfinder0/public_bug/tree/main/tenda/w20e/2 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •