Vulnerabilities > Tendacn
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-05-22 | CVE-2020-13389 | Classic Buffer Overflow vulnerability in Tendacn products An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. | 9.8 |
| 2019-11-21 | CVE-2019-5072 | OS Command Injection vulnerability in Tendacn Ac9V1.0 Firmware 15.03.05.14En/15.03.05.16Multitru An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). | 7.8 |
| 2019-11-21 | CVE-2019-5071 | OS Command Injection vulnerability in Tendacn Ac9V1.0 Firmware 15.03.05.14En/15.03.05.16Multitru An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). | 7.8 |
| 2019-09-19 | CVE-2019-16412 | Improper Input Validation vulnerability in Tendacn N301 Firmware In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. | 7.5 |
| 2018-12-23 | CVE-2018-20373 | Cross-site Scripting vulnerability in Tendacn Adsl Firmware 1.0.1 Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client. | 5.4 |
| 2018-09-02 | CVE-2018-16334 | OS Command Injection vulnerability in Tendacn Ac10 Firmware and AC9 Firmware An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. | 8.8 |
| 2018-09-02 | CVE-2018-16333 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Tendacn products An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. | 7.5 |
| 2018-08-04 | CVE-2018-14497 | Cross-site Scripting vulnerability in Tendacn D152 Firmware Tenda D152 ADSL routers allow XSS via a crafted SSID. | 5.4 |
| 2018-07-21 | CVE-2018-14492 | Out-of-bounds Write vulnerability in Tendacn products Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI. | 7.5 |
| 2018-03-20 | CVE-2018-5768 | Use of Hard-coded Credentials vulnerability in Tendacn Ac15 Firmware A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header. | 9.8 |