Vulnerabilities > Tenda > AX3 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-03-04 | CVE-2021-46393 | Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.10 There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. | 9.8 |
| 2022-02-04 | CVE-2022-24142 | Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. | 7.5 |
| 2022-02-04 | CVE-2022-24143 | Out-of-bounds Write vulnerability in Tenda Ax12 Firmware and AX3 Firmware Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. | 7.5 |
| 2022-02-04 | CVE-2022-24144 | Command Injection vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. | 9.8 |
| 2022-02-04 | CVE-2022-24145 | Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. | 7.5 |
| 2022-02-04 | CVE-2022-24146 | Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. | 7.5 |
| 2022-02-04 | CVE-2022-24147 | Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. | 7.5 |
| 2022-02-04 | CVE-2022-24148 | Command Injection vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. | 9.8 |
| 2022-02-04 | CVE-2022-24149 | Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. | 7.5 |
| 2022-02-04 | CVE-2022-24150 | Command Injection vulnerability in Tenda AX3 Firmware 16.03.12.10Cn Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. | 9.8 |