Tenda I22 Firmware 1.0.0.3(4687)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:i22_firmware:1.0.0.3\(4687\):*:*:*:*:*:*:*

part: o version: 1.0.0.3(4687) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductI22 Firmware (02195dde-e9b5-5ca2-bf34-847f18f9ad09)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9297 vulnerable 2026-06-08 07:45:22.208543 Tenda i22 wxportalauth formWeixinAuthInfoGet stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing manipulation of the argument Type results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2025-08-21T12:02:11.484Z
Updated: 2025-08-21T13:24:53.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7585 vulnerable 2026-06-08 06:58:22.756809 Tenda i22 apPortalAuth formApPortalWebAuth buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical. Affected by this vulnerability is the function formApPortalWebAuth of the file /goform/apPortalAuth. The manipulation of the argument webUserName/webUserPassword leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-07T17:00:06.990Z
Updated: 2024-08-07T18:12:56.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7584 vulnerable 2026-06-08 06:58:22.755986 Tenda i22 apPortalPhoneAuth formApPortalPhoneAuth buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-07T16:31:04.683Z
Updated: 2024-08-07T17:47:32.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7583 vulnerable 2026-06-08 06:58:22.755437 Tenda i22 apPortalOneKeyAuth formApPortalOneKeyAuth buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the function formApPortalOneKeyAuth of the file /goform/apPortalOneKeyAuth. The manipulation of the argument data leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-07T16:00:08.539Z
Updated: 2024-08-07T17:37:33.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7582 vulnerable 2026-06-08 06:58:22.752899 Tenda i22 apPortalAccessCodeAuth formApPortalAccessCodeAuth buffer overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687). This vulnerability affects the function formApPortalAccessCodeAuth of the file /goform/apPortalAccessCodeAuth. The manipulation of the argument accessCode/data/acceInfo leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-07T15:31:04.959Z
Updated: 2024-08-07T17:41:35.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4252 vulnerable 2026-06-08 06:50:17.302366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10750 vulnerable 2026-06-08 06:23:47.440547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45672 vulnerable 2026-06-08 05:50:36.586244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45671 vulnerable 2026-06-08 05:50:36.585770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45670 vulnerable 2026-06-08 05:50:36.585344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45669 vulnerable 2026-06-08 05:50:36.584893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45668 vulnerable 2026-06-08 05:50:36.584311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45667 vulnerable 2026-06-08 05:50:36.583831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45666 vulnerable 2026-06-08 05:50:36.583232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45665 vulnerable 2026-06-08 05:50:36.582846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45664 vulnerable 2026-06-08 05:50:36.582171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45663 vulnerable 2026-06-08 05:50:36.580266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.