CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

CVEs mapped to this weakness (15,182)

page 507 of 760

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-45517	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.
CVE-2022-45516	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-45515	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.
CVE-2022-45514	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter.
CVE-2022-45513	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.
CVE-2022-45512	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter.
CVE-2022-45511	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.
CVE-2022-45510	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.
CVE-2022-45509	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.
CVE-2022-45508	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.
CVE-2022-45507	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.
CVE-2022-45505	Tenda W30E	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.
CVE-2022-45503	Tenda W6-S	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.
CVE-2022-45501	Tenda W6-S	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.
CVE-2022-45499	Tenda W6-S	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.
CVE-2022-44931	Tenda A18	Hig	0.49	7.5	0.01	Dec 8, 2022	Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-45640	Tenda AC6V1.0	Hig	0.49	7.5	0.01	Dec 1, 2022	Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).
CVE-2022-45337	Tenda Tx9 Pro Firmware	Hig	0.49	7.5	0.01	Nov 30, 2022	Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-44163	Tenda AC21	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44158	Tenda AC21	Hig	0.49	7.5	0.01	Nov 21, 2022	Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.

CVE-2022-45517HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.
CVE-2022-45516HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-45515HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.
CVE-2022-45514HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter.
CVE-2022-45513HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.
CVE-2022-45512HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter.
CVE-2022-45511HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.
CVE-2022-45510HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.
CVE-2022-45509HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.
CVE-2022-45508HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.
CVE-2022-45507HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.
CVE-2022-45505HigDec 8, 2022
Tenda
W30E
risk 0.49cvss 7.5epss 0.01
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.
CVE-2022-45503HigDec 8, 2022
Tenda
W6-S
risk 0.49cvss 7.5epss 0.01
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.
CVE-2022-45501HigDec 8, 2022
Tenda
W6-S
risk 0.49cvss 7.5epss 0.01
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.
CVE-2022-45499HigDec 8, 2022
Tenda
W6-S
risk 0.49cvss 7.5epss 0.01
Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.
CVE-2022-44931HigDec 8, 2022
Tenda
A18
risk 0.49cvss 7.5epss 0.01
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-45640HigDec 1, 2022
Tenda
AC6V1.0
risk 0.49cvss 7.5epss 0.01
Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).
CVE-2022-45337HigNov 30, 2022
Tenda
Tx9 Pro Firmware
risk 0.49cvss 7.5epss 0.01
Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-44163HigNov 21, 2022
Tenda
AC21
risk 0.49cvss 7.5epss 0.01
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44158HigNov 21, 2022
Tenda
AC21
risk 0.49cvss 7.5epss 0.01
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.