<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: i22 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-9297: A vulnerability was detected in Tenda i22 1.0.0.3(4687)</title><link>https://patchthecve.com/cve/CVE-2025-9297.html</link><guid>https://patchthecve.com/cve/CVE-2025-9297.html</guid><pubDate>Wed, 17 Jun 2026 10:08:41 +0000</pubDate><description>HIGH 8.8: A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing manipulation of the argument Type results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be u</description></item><item><title>CVE-2024-10750: A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2024-10750.html</link><guid>https://patchthecve.com/cve/CVE-2024-10750.html</guid><pubDate>Wed, 17 Jun 2026 06:56:21 +0000</pubDate><description>MEDIUM 6.5: A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV?fgHPOST/goform/SysToo. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can b</description></item><item><title>CVE-2024-7585: A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-7585.html</link><guid>https://patchthecve.com/cve/CVE-2024-7585.html</guid><pubDate>Wed, 17 Jun 2026 08:20:29 +0000</pubDate><description>HIGH 8.8: A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical. Affected by this vulnerability is the function formApPortalWebAuth of the file /goform/apPortalAuth. The manipulation of the argument webUserName/webUserPassword leads to buffer overflow. The attack can be launched</description></item><item><title>CVE-2024-7584: A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687)</title><link>https://patchthecve.com/cve/CVE-2024-7584.html</link><guid>https://patchthecve.com/cve/CVE-2024-7584.html</guid><pubDate>Wed, 17 Jun 2026 08:20:29 +0000</pubDate><description>HIGH 8.8: A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit has</description></item><item><title>CVE-2024-7583: A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687)</title><link>https://patchthecve.com/cve/CVE-2024-7583.html</link><guid>https://patchthecve.com/cve/CVE-2024-7583.html</guid><pubDate>Wed, 17 Jun 2026 08:20:29 +0000</pubDate><description>HIGH 8.8: A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the function formApPortalOneKeyAuth of the file /goform/apPortalOneKeyAuth. The manipulation of the argument data leads to buffer overflow. The attack may be initiated remotely. The explo</description></item><item><title>CVE-2024-7582: A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687)</title><link>https://patchthecve.com/cve/CVE-2024-7582.html</link><guid>https://patchthecve.com/cve/CVE-2024-7582.html</guid><pubDate>Wed, 17 Jun 2026 08:20:29 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687). This vulnerability affects the function formApPortalAccessCodeAuth of the file /goform/apPortalAccessCodeAuth. The manipulation of the argument accessCode/data/acceInfo leads to buffer overflow. The attack can be initiated </description></item><item><title>CVE-2024-4252: A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687)</title><link>https://patchthecve.com/cve/CVE-2024-4252.html</link><guid>https://patchthecve.com/cve/CVE-2024-4252.html</guid><pubDate>Wed, 17 Jun 2026 08:01:31 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this vulner</description></item></channel></rss>