Vulnerabilities > Tendacn
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-07 | CVE-2023-40942 | Out-of-bounds Write vulnerability in Tendacn AC9 Firmware 15.03.06.42Multitd0 Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg. | 9.8 |
| 2023-07-07 | CVE-2023-37144 | Command Injection vulnerability in Tendacn Ac10 Firmware 15.03.06.26 Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. | 9.8 |
| 2022-12-02 | CVE-2022-45643 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the addWifiMacFilter function. | 7.5 |
| 2022-12-02 | CVE-2022-45644 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the formSetClientState function. | 7.5 |
| 2022-12-02 | CVE-2022-45645 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function. | 7.5 |
| 2022-12-02 | CVE-2022-45646 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeedUp parameter in the formSetClientState function. | 7.5 |
| 2022-12-02 | CVE-2022-45647 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeed parameter in the formSetClientState function. | 7.5 |
| 2022-12-02 | CVE-2022-45648 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the devName parameter in the formSetDeviceName function. | 7.5 |
| 2022-12-02 | CVE-2022-45649 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function. | 7.5 |
| 2022-12-02 | CVE-2022-45650 | Classic Buffer Overflow vulnerability in Tendacn AC6 Firmware 15.03.05.19 Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function. | 7.5 |