Vulnerabilities > Tenda > Ac10 Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-10-17 CVE-2022-42169 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
network
low complexity
tenda CWE-787
critical
9.8
2022-10-17 CVE-2022-42168 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
network
low complexity
tenda CWE-787
critical
9.8
2022-10-17 CVE-2022-42167 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.
network
low complexity
tenda CWE-787
critical
9.8
2022-10-17 CVE-2022-42166 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
network
low complexity
tenda CWE-787
critical
9.8
2022-10-17 CVE-2022-42165 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
network
low complexity
tenda CWE-787
critical
9.8
2022-10-17 CVE-2022-42164 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
network
low complexity
tenda CWE-787
critical
9.8
2022-10-17 CVE-2022-42163 Out-of-bounds Write vulnerability in Tenda Ac10 Firmware 15.03.06.23
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
network
low complexity
tenda CWE-787
critical
9.8
2022-07-07 CVE-2022-32054 OS Command Injection vulnerability in Tenda Ac10 Firmware 15.03.06.26
Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter.
network
low complexity
tenda CWE-78
critical
9.8
2018-10-30 CVE-2018-14558 OS Command Injection vulnerability in Tenda Ac10 Firmware, AC7 Firmware and AC9 Firmware
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10).
network
low complexity
tenda CWE-78
critical
9.8
2018-10-29 CVE-2018-18729 Out-of-bounds Write vulnerability in Tenda products
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices.
network
low complexity
tenda CWE-787
critical
9.8