MediumCVSS 5.9
EPSS 4.2%
Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.
Vendor
tendacn vulnerabilities
153 published CVES affecting tendacn, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 153
- Critical
- 73
- High
- 74
- Medium
- 5
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- ac6 firmware 28
- g3 firmware 28
- ac10u firmware 26
- g1 firmware 23
- ac15 firmware 20
- ac18 firmware 19
- ac9 firmware 17
- fh1201 firmware 15
- ac10 firmware 8
- a301 firmware 4
- ac23 ac2100 firmware 4
- pa6 firmware 4
- ac1200 firmware 2
- ac7 firmware 2
- ac9v1.0 firmware 2
- f1200 firmware 2
- f1202 firmware 2
- fh1202 firmware 2
- adsl firmware 1
- ax2 pro 1
- cp3 firmware 1
- d152 firmware 1
- g0 firmware 1
- i29 firmware 1
- n301 firmware 1
Latest tendacn CVEs
Newest publication first · page 1 of 7
-
-
HighCVSS 8.8 EPSS 1.7%
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function.
-
HighCVSS 8.8 EPSS 1.7%
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.
-
HighCVSS 8.8 EPSS 0.55%
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.
-
CriticalCVSS 9.8 EPSS 11.7%
Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.
-
HighCVSS 8.7 EPSS 1.2%
A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be...
-
HighCVSS 7.5 EPSS 0.68%
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
-
HighCVSS 7.5 EPSS 0.68%
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
-
HighCVSS 7.5 EPSS 0.55%
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
-
HighCVSS 7.5 EPSS 0.55%
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
-
HighCVSS 7.5 EPSS 0.55%
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
-
HighCVSS 8.7 EPSS 1.4%
A vulnerability classified as critical has been found in Tenda A301 15.13.08.12. This affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security leads to stack-based buffer overflow. It is possible to initiate the attack remo...
-
HighCVSS 7.5 EPSS 1.0%
Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the bin/httpd component.
-
CriticalCVSS 9.8 EPSS 4.6%
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand
-
CriticalCVSS 9.8 EPSS 6.7%
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
-
HighCVSS 7.5 EPSS 0.55%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
-
HighCVSS 7.5 EPSS 0.52%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.
-
CriticalCVSS 9.8 EPSS 0.61%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
-
CriticalCVSS 9.8 EPSS 0.63%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
-
HighCVSS 7.5 EPSS 0.57%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic
-
CriticalCVSS 9.8 EPSS 0.57%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
-
HighCVSS 7.5 EPSS 0.55%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
-
HighCVSS 7.5 EPSS 0.55%
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.
-
HighCVSS 8.8 EPSS 0.61%
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.
-
CriticalCVSS 9.8 EPSS 0.63%
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.