Vulnerabilities > Tenda > Ac15 Firmware > 15.03.05.19
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-24 | CVE-2023-30378 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. | 9.8 |
| 2023-04-24 | CVE-2023-30369 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. | 9.8 |
| 2022-11-21 | CVE-2022-44156 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind. | 7.5 |
| 2022-10-18 | CVE-2022-43259 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.18/15.03.05.19 Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. | 7.5 |
| 2022-09-23 | CVE-2022-40851 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat. | 9.8 |
| 2020-07-23 | CVE-2020-15916 | OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.19 goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. | 9.8 |
| 2020-07-13 | CVE-2020-10989 | Cross-site Scripting vulnerability in Tenda Ac15 Firmware 15.03.05.19 An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter. | 6.1 |
| 2020-07-13 | CVE-2020-10988 | Use of Hard-coded Credentials vulnerability in Tenda Ac15 Firmware 15.03.05.19 A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device. | 9.8 |
| 2020-07-13 | CVE-2020-10987 | OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.19 The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. | 9.8 |
| 2020-07-13 | CVE-2020-10986 | Cross-Site Request Forgery (CSRF) vulnerability in Tenda Ac15 Firmware 15.03.05.19 A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page. | 6.5 |