Vulnerabilities > Tenda > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-02-24 CVE-2022-25414 Out-of-bounds Write vulnerability in Tenda AC9 Firmware V15.03.2.21Cn
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.
network
low complexity
tenda CWE-787
critical
10.0
2022-02-24 CVE-2022-25417 Out-of-bounds Write vulnerability in Tenda AC9 Firmware V15.03.2.21Cn
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo.
network
low complexity
tenda CWE-787
critical
10.0
2022-02-24 CVE-2022-25418 Out-of-bounds Write vulnerability in Tenda AC9 Firmware V15.03.2.21Cn
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.
network
low complexity
tenda CWE-787
critical
10.0
2022-01-28 CVE-2021-44971 Incorrect Comparison vulnerability in Tenda Ac15 Firmware and AC5 Firmware
Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on.
network
low complexity
tenda CWE-697
critical
9.8
2021-05-07 CVE-2021-31755 Out-of-bounds Write vulnerability in Tenda Ac11 Firmware
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.
network
low complexity
tenda CWE-787
critical
10.0
2021-05-07 CVE-2021-31756 Out-of-bounds Write vulnerability in Tenda Ac11 Firmware
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.
network
low complexity
tenda CWE-787
critical
10.0
2021-05-07 CVE-2021-31757 Out-of-bounds Write vulnerability in Tenda Ac11 Firmware
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.
network
low complexity
tenda CWE-787
critical
10.0
2021-05-07 CVE-2021-31758 Out-of-bounds Write vulnerability in Tenda Ac11 Firmware
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.
network
low complexity
tenda CWE-787
critical
10.0
2020-07-23 CVE-2020-15916 OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.19
goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter.
network
low complexity
tenda CWE-78
critical
10.0
2020-07-13 CVE-2020-10988 Use of Hard-coded Credentials vulnerability in Tenda Ac15 Firmware 15.03.05.19
A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.
network
low complexity
tenda CWE-798
critical
10.0