Vulnerabilities > Tenda > High

DATE CVE VULNERABILITY TITLE RISK
2023-08-25 CVE-2023-40797 Improper Input Validation vulnerability in Tenda Ac23 Firmware 16.03.07.45Cn
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability.
network
low complexity
tenda CWE-20
8.8
2023-08-25 CVE-2023-40798 Improper Input Validation vulnerability in Tenda Ac23 Firmware 16.03.07.45Cn
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.
network
low complexity
tenda CWE-20
8.8
2023-08-25 CVE-2023-40800 Improper Input Validation vulnerability in Tenda Ac23 Firmware 16.03.07.45Cn
The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.
network
low complexity
tenda CWE-20
8.8
2023-08-25 CVE-2023-40801 Improper Input Validation vulnerability in Tenda Ac23
The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn
network
low complexity
tenda CWE-20
8.8
2023-08-25 CVE-2023-40915 Out-of-bounds Write vulnerability in Tenda AX3 Firmware 16.03.12.11
Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set.
network
low complexity
tenda CWE-787
7.5
2023-08-21 CVE-2023-39784 Out-of-bounds Write vulnerability in Tenda Ac8V4 Firmware 16.03.34.06
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function.
network
low complexity
tenda CWE-787
7.5
2023-08-21 CVE-2023-39785 Out-of-bounds Write vulnerability in Tenda Ac8V4 Firmware 16.03.34.06
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function.
network
low complexity
tenda CWE-787
7.5
2023-08-21 CVE-2023-39786 Out-of-bounds Write vulnerability in Tenda Ac8V4 Firmware 16.03.34.06
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.
network
low complexity
tenda CWE-787
7.5
2023-08-14 CVE-2023-39827 Out-of-bounds Write vulnerability in Tenda A18 Firmware 15.13.07.09
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function.
network
low complexity
tenda CWE-787
7.5
2023-08-14 CVE-2023-39828 Out-of-bounds Write vulnerability in Tenda A18 Firmware 15.13.07.09
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
network
low complexity
tenda CWE-787
7.5