Vulnerabilities > Tendacn > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-05-22 CVE-2020-13389 Classic Buffer Overflow vulnerability in Tendacn products
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.
network
low complexity
tendacn CWE-120
critical
9.8
2018-03-20 CVE-2018-5768 Use of Hard-coded Credentials vulnerability in Tendacn Ac15 Firmware
A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.
network
low complexity
tendacn CWE-798
critical
9.8
2018-03-20 CVE-2018-5770 Insecure Default Initialization of Resource vulnerability in Tendacn Ac15 Firmware
An issue was discovered on Tenda AC15 devices.
network
low complexity
tendacn CWE-1188
critical
9.8
2018-03-01 CVE-2018-7561 Out-of-bounds Write vulnerability in Tendacn AC9 Firmware 15.03.05.14En
Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of service or possibly have unspecified other impact.
network
low complexity
tendacn CWE-787
critical
9.8
2018-02-15 CVE-2018-5767 Improper Input Validation vulnerability in Tendacn Ac15 Firmware 15.03.1.16
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices.
network
low complexity
tendacn CWE-20
critical
9.8