Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Filtered by product I29
Total 10 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-50991 1 Tenda 2 I29, I29 Firmware 2024-01-09 N/A 7.5 HIGH
Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function.
CVE-2023-50992 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.
CVE-2023-50990 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
CVE-2023-50989 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
CVE-2023-50988 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
CVE-2023-50987 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.
CVE-2023-50986 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.
CVE-2023-50985 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.
CVE-2023-50984 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function.
CVE-2023-50983 1 Tenda 2 I29, I29 Firmware 2023-12-22 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function.