Vulnerability index

Browse CVEs

1,740 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Ac18 Firmware CRITICAL 9.8
CVE-2022-30472

Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat

No fix yet
Fix from $2,300 2022-05-26
Ac18 Firmware CRITICAL 9.8
CVE-2022-30474

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlI…

No fix yet
Fix from $2,300 2022-05-26
Ac18 Firmware CRITICAL 9.8
CVE-2022-30476

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetF…

No fix yet
Fix from $2,300 2022-05-26
Ac18 Firmware CRITICAL 9.8
CVE-2022-30477

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetC…

No fix yet
Fix from $2,300 2022-05-26
Ac18 Firmware HIGH 7.5
CVE-2022-30473

Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set

No fix yet
Fix from $1,950 2022-05-26
Ac18 Firmware HIGH 7.5
CVE-2022-30475

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/Wifi…

No fix yet
Fix from $1,950 2022-05-26
Ac9 Firmware MEDIUM 6.5
CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and …

No fix yet
Fix from $1,600 2022-05-24
Tx9 Pro Firmware HIGH 7.5
CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.

No fix yet
Fix from $1,950 2022-05-18
Ax12 Firmware HIGH 7.5
CVE-2022-28917EPSS 10%

Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.

No fix yet
Fix from $1,950 2022-05-18
Ax1803 Firmware HIGH 7.5
CVE-2022-30040

Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif…

No fix yet
Fix from $1,950 2022-05-11
Tx9 Pro Firmware CRITICAL 9.8
CVE-2022-29591

Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.

Mitigation only
Fix from $2,300 2022-05-10
Ax1806 Firmware HIGH 7.5
CVE-2022-28969

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. This vulnerabili…

No fix yet
Fix from $1,950 2022-05-06
Ax1806 Firmware HIGH 7.5
CVE-2022-28970

Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerability allows…

No fix yet
Fix from $1,950 2022-05-06
Ax1806 Firmware HIGH 7.5
CVE-2022-28971

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows a…

No fix yet
Fix from $1,950 2022-05-06
Ax1806 Firmware HIGH 7.5
CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set. This vulnerab…

No fix yet
Fix from $1,950 2022-05-06
Ax1806 Firmware HIGH 7.5
CVE-2022-28973

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan. This vulnerability all…

No fix yet
Fix from $1,950 2022-05-06
Tx9 Pro Firmware CRITICAL 9.8
CVE-2022-29592EPSS 20%

Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).

No fix yet
Fix from $2,300 2022-05-05
Ac15 Firmware CRITICAL 9.8
CVE-2022-28557EPSS 23%

There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, …

No fix yet
Fix from $2,300 2022-05-04
Ac15 Firmware HIGH 7.5
CVE-2022-28556

Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptps…

No fix yet
Fix from $1,950 2022-05-04
Ax12 Firmware CRITICAL 9.8
CVE-2022-28082EPSS 9%

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.

No fix yet
Fix from $2,300 2022-05-04
Ac9 Firmware CRITICAL 9.8
CVE-2022-28560

There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attac…

No fix yet
Fix from $2,300 2022-05-03
Ax12 Firmware CRITICAL 9.8
CVE-2022-28561EPSS 10%

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker…

No fix yet
Fix from $2,300 2022-05-03
Ax1806 Firmware HIGH 8.8
CVE-2022-28572

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function

No fix yet
Fix from $1,950 2022-05-02
Ax12 Firmware MEDIUM 6.5
CVE-2022-27374

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.

No fix yet
Fix from $1,600 2022-04-25
Ax12 Firmware MEDIUM 6.5
CVE-2022-27375

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at /goform/WifiExtraSet.

No fix yet
Fix from $1,600 2022-04-25
Ac9 Firmware CRITICAL 9.8
CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a s…

No fix yet
Fix from $2,300 2022-04-07
Ac9 Firmware CRITICAL 9.8
CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.

No fix yet
Fix from $2,300 2022-04-07
Ac9 Firmware CRITICAL 9.8
CVE-2022-26278

Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.

No fix yet
Fix from $2,300 2022-03-28
M3 Firmware CRITICAL 9.8
CVE-2022-26289

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-26290

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.

No fix yet
Fix from $2,300 2022-03-24