Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Total 794 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49430 1 Tenda 2 Ax9, Ax9 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-49429 1 Tenda 2 Ax9, Ax9 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.
CVE-2023-49428 1 Tenda 2 Ax12, Ax12 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49427 1 Tenda 2 Ax12, Ax12 Firmware 2024-11-21 N/A 7.5 HIGH
Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList function.
CVE-2023-49426 1 Tenda 2 Ax12, Ax12 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2023-49425 1 Tenda 2 Ax12, Ax12 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49424 1 Tenda 2 Ax12, Ax12 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-49411 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.
CVE-2023-49410 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
CVE-2023-49409 1 Tenda 2 Ax3, Ax3 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49408 1 Tenda 2 Ax3, Ax3 Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
CVE-2023-49406 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49405 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.
CVE-2023-49404 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.
CVE-2023-49403 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.
CVE-2023-49402 1 Tenda 2 W30e, W30e Firmware 2024-11-21 N/A 9.8 CRITICAL
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.
CVE-2023-49047 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-11-21 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
CVE-2023-49046 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-11-21 N/A 9.8 CRITICAL
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.
CVE-2023-49044 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-11-21 N/A 9.8 CRITICAL
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
CVE-2023-49043 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-11-21 N/A 9.8 CRITICAL
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.