Vulnerabilities > Tenda
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-18 | CVE-2024-10130 | Stack-based Buffer Overflow vulnerability in Tenda AC8 Firmware 16.03.34.06 A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. | 8.8 |
| 2024-10-18 | CVE-2024-10123 | Stack-based Buffer Overflow vulnerability in Tenda AC8 Firmware 16.03.34.06 A vulnerability was found in Tenda AC8 16.03.34.06. | 8.8 |
| 2024-10-10 | CVE-2024-9793 | OS Command Injection vulnerability in Tenda Ac1206 Firmware 15.03.06.23 A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. | 9.8 |
| 2024-09-13 | CVE-2024-46044 | Out-of-bounds Write vulnerability in Tenda Ch22 Firmware 1.0.0.6(468) CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function. | 9.8 |
| 2024-09-13 | CVE-2024-46045 | Out-of-bounds Write vulnerability in Tenda Ch22 Firmware 1.0.0.6(468) Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function. | 9.8 |
| 2024-09-13 | CVE-2024-46046 | Out-of-bounds Write vulnerability in Tenda Fh451 Firmware 1.0.0.9 Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function. | 9.8 |
| 2024-09-13 | CVE-2024-46047 | Out-of-bounds Write vulnerability in Tenda Fh451 Firmware 1.0.0.9 Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function. | 7.5 |
| 2024-09-13 | CVE-2024-46048 | Command Injection vulnerability in Tenda Fh451 Firmware 1.0.0.9 Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i | 9.8 |
| 2024-09-13 | CVE-2024-46049 | Out-of-bounds Write vulnerability in Tenda O6 Firmware 1.0.0.7(2054) Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function. | 9.8 |
| 2024-09-10 | CVE-2023-36103 | Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.20 Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request. | 9.8 |