Tenda Ch22 vulnerabilities, page 2

44 vulnerabilities

Known vulnerabilities in Tenda Ch22, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CriticalCVE-2025-12234tenda · ch22_firmwareTenda CH22 SafeMacFilter fromSafeMacFilter buffer overflowA vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS1.07%9.8CriticalCVE-2025-12232tenda · ch22_firmwareTenda CH22 SafeClientFilter fromSafeClientFilter buffer overflowA vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.EPSS4.92%8.6HighCVE-2025-12235tenda · ch22_firmwareTenda CH22 SetIpBind fromSetIpBind buffer overflowA vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.EPSS5.23%9.8CriticalCVE-2025-12265tenda · ch22_firmwareTenda CH22 VirtualSer fromVirtualSer buffer overflowA weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.EPSS1.04%9.8CriticalCVE-2025-12273tenda · ch22_firmwareTenda CH22 webExcptypemanFilter fromwebExcptypemanFilter buffer overflowA weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.EPSS1.01%9CriticalCVE-2025-12274tenda · ch22_firmwareTenda CH22 P2pListFilter fromP2pListFilter buffer overflowA security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.EPSS0.71%9.8CriticalCVE-2025-12272tenda · ch22_firmwareTenda CH22 addressNat fromAddressNat buffer overflowA security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.EPSS0.75%9CriticalCVE-2025-8180tenda · ch22_firmwareTenda CH22 deleteUserName formdeleteUserName buffer overflowA vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation of the argument old_account leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS10.16%9.8CriticalCVE-2024-46044tenda · ch22_firmwaretenda ch22_firmwareCH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.EPSS0.62%9.8CriticalCVE-2024-46045tenda · ch22_firmwaretenda ch22_firmwareTenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.EPSS0.58%7.4HighCVE-2026-77031tenda · ch22_firmwareTenda CH22 formcreateFileName command injectionA vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS2.75%9CriticalCVE-2026-19346tenda · ch22_firmwareTenda CH22 CertListInfo formCertListInfo command injectionA vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.EPSS2.73%9CriticalCVE-2026-5204tenda · ch22_firmwareTenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflowA vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.EPSS1.01%9CriticalCVE-2026-5604tenda · ch22_firmwareTenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflowA security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.EPSS0.89%9.8CriticalCVE-2026-5962tenda · ch22_firmwareTenda CH22 httpd R7WebsSecurityHandlerfunction path traversalA vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.EPSS0.78%9CriticalCVE-2026-5605tenda · ch22_firmwareTenda CH22 WrlExtraSet formWrlExtraSet stack-based overflowA weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.EPSS0.89%8.8HighCVE-2026-5153tenda · ch22_firmwareTenda CH22 WriteFacMac FormWriteFacMac command injectionA flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.EPSS6.47%9CriticalCVE-2026-5156tenda · ch22_firmwareTenda CH22 Parameter QuickIndex formQuickIndex stack-based overflowA vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mit_linktype causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.EPSS1.01%9CriticalCVE-2026-5152tenda · ch22_firmwareTenda CH22 createFileName formCreateFileName stack-based overflowA vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.EPSS1.01%9CriticalCVE-2026-5155tenda · ch22_firmwareTenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflowA vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.EPSS1.01%