Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Total 746 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49428 1 Tenda 2 Ax12, Ax12 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49425 1 Tenda 2 Ax12, Ax12 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49426 1 Tenda 2 Ax12, Ax12 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2023-49424 1 Tenda 2 Ax12, Ax12 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-49436 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49408 1 Tenda 2 Ax3, Ax3 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
CVE-2023-49409 1 Tenda 2 Ax3, Ax3 Firmware 2023-12-09 N/A 9.8 CRITICAL
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-48963 1 Tenda 2 I6, I6 Firmware 2023-12-05 N/A 7.5 HIGH
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/wifiSSIDget.
CVE-2023-48964 1 Tenda 2 I6, I6 Firmware 2023-12-05 N/A 7.5 HIGH
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet.
CVE-2023-49040 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-01 N/A 9.8 CRITICAL
An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
CVE-2023-49042 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-01 N/A 9.8 CRITICAL
Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.
CVE-2023-49047 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-01 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
CVE-2023-49044 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-01 N/A 9.8 CRITICAL
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
CVE-2023-45479 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-01 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098.
CVE-2023-45480 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-01 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878.
CVE-2023-45481 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-01 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
CVE-2023-45482 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-01 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
CVE-2023-45483 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-01 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time.
CVE-2023-45484 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-01 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
CVE-2023-49043 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-01 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.