Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Total 741 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48111 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-10 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
CVE-2023-49410 1 Tenda 2 W30e, W30e Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
CVE-2023-45483 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time.
CVE-2023-49411 1 Tenda 2 W30e, W30e Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.
CVE-2023-49431 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49435 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVE-2023-49402 1 Tenda 2 W30e, W30e Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.
CVE-2022-45781 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-10 N/A 8.8 HIGH
Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName.
CVE-2023-49430 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-49432 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
CVE-2023-49434 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-48110 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-10 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
CVE-2023-50002 1 Tenda 2 W30e, W30e Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode.
CVE-2023-49433 1 Tenda 2 Ax9, Ax9 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVE-2023-45484 1 Tenda 2 Ac10, Ac10 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
CVE-2023-38823 1 Tenda 8 Ac18, Ac18 Firmware, Ac19 and 5 more 2023-12-10 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVE-2023-49424 1 Tenda 2 Ax12, Ax12 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-49047 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-10 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
CVE-2023-49043 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-10 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.
CVE-2023-49437 1 Tenda 2 Ax12, Ax12 Firmware 2023-12-10 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.