tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
CVE-2023-45482 CRITICAL
Component: ac10_firmware

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_l...

📅 2023-11-29
CVSS 9.8 Dossier →
CVE-2023-45481 CRITICAL
Component: ac10_firmware

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCf...

📅 2023-11-29
CVSS 9.8 Dossier →
CVE-2023-45480 CRITICAL
Component: ac10_firmware

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878....

📅 2023-11-29
CVSS 9.8 Dossier →
CVE-2023-45479 CRITICAL
Component: ac10_firmware

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098....

📅 2023-11-29
CVSS 9.8 Dossier →
CVE-2023-49044 CRITICAL
Component: ax1803_firmware

Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_...

📅 2023-11-27
CVSS 9.8 Dossier →
Component: ax1803_firmware

Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName....

📅 2023-11-27
CVSS 7.5 Dossier →
CVE-2023-49042 CRITICAL
Component: ax1803_firmware

Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the sched...

📅 2023-11-27
CVSS 9.8 Dossier →
CVE-2023-49040 CRITICAL
Component: ax1803_firmware

An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set ...

📅 2023-11-27
CVSS 9.8 Dossier →
CVE-2023-49046 CRITICAL
Component: ax1803_firmware

Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function fo...

📅 2023-11-27
CVSS 9.8 Dossier →
CVE-2023-49043 CRITICAL
Component: ax1803_firmware

Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the func...

📅 2023-11-27
CVSS 9.8 Dossier →
Component: ax1803_firmware

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability all...

📅 2023-11-20
CVSS 7.5 Dossier →
Component: ax1803_firmware

Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allo...

📅 2023-11-20
CVSS 7.5 Dossier →
Component: ax1803_firmware

Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . This vulnerability ...

📅 2023-11-20
CVSS 7.5 Dossier →
CVE-2023-38823 CRITICAL
Component: ac6_firmware

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the for...

📅 2023-11-20
CVSS 9.8 Dossier →
Component: ax1803_firmware

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName....

📅 2023-11-14
CVSS 8.8 Dossier →
CVE-2023-47456 CRITICAL
Component: ax1806_firmware

Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat....

📅 2023-11-07
CVSS 9.1 Dossier →
CVE-2023-47455 CRITICAL
Component: ax1806_firmware

Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http reques...

📅 2023-11-07
CVSS 9.1 Dossier →
Component: rx9_pro_firmware

A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory....

📅 2023-11-07
CVSS 7.1 Dossier →
Component: rx9_pro_firmware

Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the devi...

📅 2023-11-07
CVSS 8.1 Dossier →
CVE-2023-46370 CRITICAL
Component: w18e_firmware

Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function....

📅 2023-10-25
CVSS 9.8 Dossier →
CVE-2023-46369 CRITICAL
Component: w18e_firmware

Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function....

📅 2023-10-25
CVSS 9.8 Dossier →
CVE-2023-40830 CRITICAL
Component: ac6_firmware

Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length....

📅 2023-10-03
CVSS 9.8 Dossier →
CVE-2023-42320 CRITICAL
Component: ac10_firmware

Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac ...

📅 2023-09-18
CVSS 9.8 Dossier →
CVE-2023-4498 MEDIUM
Component: n300_firmware

Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...

📅 2023-09-06
CVSS 5.3 Dossier →
Page 52 of 77 (1,844 Total Records)