Vulnerabilities > Tendacn > AC9 Firmware > 15.03.06.42.multi

DATE CVE VULNERABILITY TITLE RISK
2021-10-29 CVE-2020-22079 Out-of-bounds Write vulnerability in Tendacn Ac10U Firmware and AC9 Firmware
Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.
network
low complexity
tendacn CWE-787
critical
9.8
2021-10-29 CVE-2021-31624 Classic Buffer Overflow vulnerability in Tendacn AC9 Firmware
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter.
low complexity
tendacn CWE-120
8.8
2021-10-29 CVE-2021-31627 Classic Buffer Overflow vulnerability in Tendacn AC9 Firmware
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.
low complexity
tendacn CWE-120
8.8
2018-07-21 CVE-2018-14492 Out-of-bounds Write vulnerability in Tendacn products
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
network
low complexity
tendacn CWE-787
7.5