Vulnerabilities > Tenda > Ac15 Firmware > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-24 | CVE-2023-30371 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. | 9.8 |
| 2023-04-24 | CVE-2023-30370 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. | 9.8 |
| 2023-04-24 | CVE-2023-30369 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. | 9.8 |
| 2022-09-23 | CVE-2022-40851 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.19 Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat. | 9.8 |
| 2022-08-19 | CVE-2022-37175 | Out-of-bounds Write vulnerability in Tenda Ac15 Firmware 15.03.05.18 Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. | 9.8 |
| 2022-05-04 | CVE-2022-28557 | OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.20Multitde01 There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution | 9.8 |
| 2022-01-28 | CVE-2021-44971 | Incorrect Comparison vulnerability in Tenda Ac15 Firmware and AC5 Firmware Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. | 9.8 |
| 2020-07-23 | CVE-2020-15916 | OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.19 goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. | 9.8 |
| 2020-07-13 | CVE-2020-10987 | OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.19 The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. | 9.8 |
| 2020-07-13 | CVE-2020-10988 | Use of Hard-coded Credentials vulnerability in Tenda Ac15 Firmware 15.03.05.19 A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device. | 9.8 |