Tenda W15E vulnerabilities

Directory Traversal vulnerability on Tenda W15E devices before version 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.

A buffer overflow vulnerability was discovered in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the hostname parameter of the formSetNetCheckTools function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the picCropName parameter of the formCropAndSetWewifiPic function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the picName parameter of the formDelwebAuthPic function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the gotoUrl parameter of the formPortalAuth function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthWhiteID parameter of the formModifyWebAuthWhiteUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserInfo parameter of the formAddWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserPwd parameter of the formAddWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

A buffer overflow vulnerability was discovered in the Tenda W15E router version 15.11.0.10 in the webAuthUserPwd parameter of the formModifyWebAuthUser function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.