Vulnerability index

Browse CVEs

1,740 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Ax1806 Firmware CRITICAL 9.8
CVE-2024-40414

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

Mitigation only
Fix from $2,300 2024-07-15
Ax12 Firmware MEDIUM 6.8
CVE-2024-40412

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

Mitigation only
Fix from $1,600 2024-07-10
Ax1806 Firmware MEDIUM 6.5
CVE-2024-40417

A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the file /goform/SetIpMacBind. The ma…

Mitigation only
Fix from $1,600 2024-07-10
Ac8 Firmware CRITICAL 9.8
CVE-2023-48194

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control…

Mitigation only
Fix from $2,300 2024-07-09
O3 Firmware CRITICAL 9.8
CVE-2024-36604

Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows …

No fix yet
Fix from $2,300 2024-06-04
Fh1206 Firmware CRITICAL 9.8
CVE-2024-35339

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.

No fix yet
Fix from $2,300 2024-05-24
Fh1206 Firmware HIGH 8.6
CVE-2024-35340

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand.

No fix yet
Fix from $1,950 2024-05-24
Ax1806 Firmware CRITICAL 9.8
CVE-2024-35571

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

No fix yet
Fix from $2,300 2024-05-20
Ax1806 Firmware CRITICAL 9.8
CVE-2024-35580

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

No fix yet
Fix from $2,300 2024-05-20
Ax1806 Firmware HIGH 8.0
CVE-2024-35578

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.

No fix yet
Fix from $1,950 2024-05-20
Ax1806 Firmware HIGH 7.7
CVE-2024-35579

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.

No fix yet
Fix from $1,950 2024-05-20
Ax1806 Firmware MEDIUM 5.2
CVE-2024-35576

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.

No fix yet
Fix from $1,600 2024-05-20
Fh1206 Firmware CRITICAL 9.8
CVE-2024-34943

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSet…

No fix yet
Fix from $2,300 2024-05-14
Fh1206 Firmware CRITICAL 9.8
CVE-2024-34945

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.

No fix yet
Fix from $2,300 2024-05-14
Fh1206 Firmware HIGH 8.8
CVE-2024-34942

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeComm…

No fix yet
Fix from $1,950 2024-05-14
Fh1206 Firmware HIGH 8.8
CVE-2024-34944

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListCli…

Mitigation only
Fix from $1,950 2024-05-14
Ac18 Firmware HIGH 8.2
CVE-2024-34974

Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter.

No fix yet
Fix from $1,950 2024-05-14
Fh1206 Firmware MEDIUM 6.5
CVE-2024-34946

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClie…

No fix yet
Fix from $1,600 2024-05-14
O3 Firmware HIGH 7.2
CVE-2024-34338

Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/getTracer…

No fix yet
Fix from $1,950 2024-05-14
I21 Firmware HIGH 8.8
CVE-2024-4497

A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been declared as critical. This vulnerability affects the function formexeCommand. The …

Mitigation only
Fix from $1,950 2024-05-05
I21 Firmware HIGH 8.8
CVE-2024-4496

A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been classified as critical. This affects the function formWifiMacFilterSet. The manipu…

Mitigation only
Fix from $1,950 2024-05-05
I21 Firmware HIGH 8.8
CVE-2024-4495

A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. Affected by this issue is the function formWifiMacFilterGet. The ma…

Mitigation only
Fix from $1,950 2024-05-05
I21 Firmware HIGH 8.8
CVE-2024-4494

A vulnerability has been found in Tenda i21 1.0.0.14(4656) and classified as critical. Affected by this vulnerability is the function formSetUplinkIn…

Mitigation only
Fix from $1,950 2024-05-05
I21 Firmware HIGH 8.8
CVE-2024-4493

A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.14(4656). Affected is the function formSetAutoPing. The manipulation …

Mitigation only
Fix from $1,950 2024-05-05
I21 Firmware HIGH 8.8
CVE-2024-4492

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4656). This issue affects the function formOfflineSet of the …

Mitigation only
Fix from $1,950 2024-05-05
I21 Firmware HIGH 8.8
CVE-2024-4491

A vulnerability classified as critical was found in Tenda i21 1.0.0.14(4656). This vulnerability affects the function formGetDiagnoseInfo. The manipu…

Mitigation only
Fix from $1,950 2024-05-05
Ac18 Firmware CRITICAL 9.8
CVE-2024-33835

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function.

No fix yet
Fix from $2,300 2024-05-01
A301 Firmware HIGH 8.8
CVE-2024-4291

A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule …

Mitigation only
Fix from $1,950 2024-04-27
I22 Firmware HIGH 8.8
CVE-2024-4252

A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This affects the function formSetUrlFilterRule. The manipulation of…

Mitigation only
Fix from $1,950 2024-04-27
I21 Firmware HIGH 8.8
CVE-2024-4251

A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the fi…

Mitigation only
Fix from $1,950 2024-04-27