Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Total 532 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-50990 1 Tenda 2 I29, I29 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
CVE-2023-49410 1 Tenda 2 W30e, W30e Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
CVE-2023-49437 1 Tenda 2 Ax12, Ax12 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49043 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-02-05 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.
CVE-2023-45479 1 Tenda 2 Ac10, Ac10 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098.
CVE-2023-51095 1 Tenda 2 M3, M3 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
CVE-2023-51091 1 Tenda 2 M3, M3 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
CVE-2023-49428 1 Tenda 2 Ax12, Ax12 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-51094 1 Tenda 2 M3, M3 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
CVE-2023-50988 1 Tenda 2 I29, I29 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
CVE-2023-49409 1 Tenda 2 Ax3, Ax3 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49436 1 Tenda 2 Ax9, Ax9 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49430 1 Tenda 2 Ax9, Ax9 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-50986 1 Tenda 2 I29, I29 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.
CVE-2023-49408 1 Tenda 2 Ax3, Ax3 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
CVE-2023-45481 1 Tenda 2 Ac10, Ac10 Firmware 2024-02-05 N/A 9.8 CRITICAL
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
CVE-2023-48109 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-02-05 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
CVE-2023-48964 1 Tenda 2 I6, I6 Firmware 2024-02-05 N/A 7.5 HIGH
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet.
CVE-2023-49040 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-02-05 N/A 9.8 CRITICAL
An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
CVE-2023-48963 1 Tenda 2 I6, I6 Firmware 2024-02-05 N/A 7.5 HIGH
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/wifiSSIDget.