VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 509 of 760
  • CVE-2022-40107HigSep 23, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  • CVE-2022-40106HigSep 23, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  • CVE-2022-40105HigSep 23, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  • CVE-2022-40104HigSep 23, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  • CVE-2022-40102HigSep 23, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  • CVE-2022-40101HigSep 23, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  • CVE-2022-40076HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.

  • CVE-2022-40075HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.

  • CVE-2022-40074HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.

  • CVE-2022-40073HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.

  • CVE-2022-40072HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.

  • CVE-2022-40071HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.

  • CVE-2022-40070HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.

  • CVE-2022-40069HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.

  • CVE-2022-40068HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.

  • CVE-2022-40067HigSep 19, 2022
    risk 0.49cvss 7.5epss 0.01

    Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.

  • CVE-2020-36601HigSep 16, 2022
    risk 0.49cvss 7.5epss 0.01

    Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot.

  • CVE-2020-36600HigSep 16, 2022
    risk 0.49cvss 7.5epss 0.01

    Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart.

  • CVE-2022-26860HigSep 6, 2022
    risk 0.49cvss 7.5epss 0.00

    Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.

  • CVE-2022-2043HigAug 31, 2022
    risk 0.49cvss 7.5epss 0.01

    MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive.