Vulnerabilities > Tenda > Ac10 Firmware > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-10-17 | CVE-2022-42171 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo. | 9.8 |
2022-10-17 | CVE-2022-42170 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart. | 9.8 |
2022-10-17 | CVE-2022-42169 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter. | 9.8 |
2022-10-17 | CVE-2022-42168 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind. | 9.8 |
2022-10-17 | CVE-2022-42167 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg. | 9.8 |
2022-10-17 | CVE-2022-42166 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan. | 9.8 |
2022-10-17 | CVE-2022-42165 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName. | 9.8 |
2022-10-17 | CVE-2022-42164 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState. | 9.8 |
2022-10-17 | CVE-2022-42163 | Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting. | 9.8 |
2022-07-07 | CVE-2022-32054 | OS Command Injection vulnerability in Tenda Ac10 Firmware 15.03.06.26 Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter. | 9.8 |