CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

CVEs mapped to this weakness (14,670)

page 483 of 734

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-45511	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.
CVE-2022-45510	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.
CVE-2022-45509	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.
CVE-2022-45508	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.
CVE-2022-45507	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.
CVE-2022-45505	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.
CVE-2022-45503	Tenda W6-S	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.
CVE-2022-45501	Tenda W6-S	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.
CVE-2022-45499	Tenda W6-S	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.
CVE-2022-44931	Tenda A18	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-45640	Tenda AC6V1.0	Hig	0.49	7.5	0.01	Dec 1, 2022	Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).
CVE-2022-45337	Tenda Tx9 Pro Firmware	Hig	0.49	7.5	0.01	Nov 30, 2022	Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-44163	Tenda AC21	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44158	Tenda AC21	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.
CVE-2022-44156	Tenda AC15	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.
CVE-2022-44169	Tenda AC15	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.
CVE-2022-44168	Tenda AC15	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..
CVE-2022-44167	Tenda AC15	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.
CVE-2022-42060	Tenda AC1200 Router	Hig	0.49	7.5	0.01	Nov 15, 2022	Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
CVE-2021-40226	Xpdf Xpdfreader	Hig	0.49	7.5	0.01	Nov 10, 2022	xpdfreader 4.03 is vulnerable to Buffer Overflow.

CVE-2022-45511HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.
CVE-2022-45510HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.
CVE-2022-45509HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.
CVE-2022-45508HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.
CVE-2022-45507HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.
CVE-2022-45505HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.
CVE-2022-45503HigDec 8, 2022
Tenda
W6-S
risk 0.49cvss 7.5epss 0.01
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.
CVE-2022-45501HigDec 8, 2022
Tenda
W6-S
risk 0.49cvss 7.5epss 0.01
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.
CVE-2022-45499HigDec 8, 2022
Tenda
W6-S
risk 0.49cvss 7.5epss 0.01
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.
CVE-2022-44931HigDec 8, 2022
Tenda
A18
risk 0.49cvss 7.5epss 0.01
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-45640HigDec 1, 2022
Tenda
AC6V1.0
risk 0.49cvss 7.5epss 0.01
Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).
CVE-2022-45337HigNov 30, 2022
Tenda
Tx9 Pro Firmware
risk 0.49cvss 7.5epss 0.01
Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-44163HigNov 21, 2022
Tenda
AC21
risk 0.49cvss 7.5epss 0.01
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44158HigNov 21, 2022
Tenda
AC21
risk 0.49cvss 7.5epss 0.01
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.
CVE-2022-44156HigNov 21, 2022
Tenda
AC15
risk 0.49cvss 7.5epss 0.01
Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.
CVE-2022-44169HigNov 21, 2022
Tenda
AC15
risk 0.49cvss 7.5epss 0.01
Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.
CVE-2022-44168HigNov 21, 2022
Tenda
AC15
risk 0.49cvss 7.5epss 0.01
Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..
CVE-2022-44167HigNov 21, 2022
Tenda
AC15
risk 0.49cvss 7.5epss 0.01
Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.
CVE-2022-42060HigNov 15, 2022
Tenda
AC1200 Router
risk 0.49cvss 7.5epss 0.01
Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
CVE-2021-40226HigNov 10, 2022
Xpdf
Xpdfreader
risk 0.49cvss 7.5epss 0.01
xpdfreader 4.03 is vulnerable to Buffer Overflow.