Browse CVEs

CRITICAL 9.8 CVE-2022-37815 Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex. Ac1206 Firmware No fix yet Fix from $2,3002022-08-25 CRITICAL 9.8 CVE-2022-37816 Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind. Ac1206 Firmware No fix yet Fix from $2,3002022-08-25 HIGH 7.8 CVE-2022-37817 Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind. Ax1803 Firmware No fix yet Fix from $1,9502022-08-25 HIGH 7.8 CVE-2022-37818 Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. Ax1803 Firmware No fix yet Fix from $1,9502022-08-25 CRITICAL 9.8 CVE-2022-37175 Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. Ac15 Firmware Mitigation only Fix from $2,3002022-08-19 CRITICAL 9.8 CVE-2022-35201 Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. Ac18 Firmware Mitigation only Fix from $2,3002022-08-19 CRITICAL 9.8 CVE-2022-36273 Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg. Ac9 Firmware No fix yet Fix from $2,3002022-08-16 CRITICAL 9.8 CVE-2022-35555EPSS 25% A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters fo… W6 Firmware No fix yet Fix from $2,3002022-08-12 CRITICAL 9.8 CVE-2022-35559EPSS 11% A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and p… W6 Firmware No fix yet Fix from $2,3002022-08-12 HIGH 7.5 CVE-2022-35557 A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denia… W6 Firmware No fix yet Fix from $1,9502022-08-12 HIGH 7.5 CVE-2022-35558 A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a … W6 Firmware No fix yet Fix from $1,9502022-08-12 HIGH 7.5 CVE-2022-35560 A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denia… W6 Firmware No fix yet Fix from $1,9502022-08-12 HIGH 7.5 CVE-2022-35561 A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a … W6 Firmware No fix yet Fix from $1,9502022-08-12 CRITICAL 9.8 CVE-2022-34595 Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status. Ax1803 Firmware No fix yet Fix from $2,3002022-07-06 CRITICAL 9.8 CVE-2022-34596 Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting. Ax1803 Firmware No fix yet Fix from $2,3002022-07-06 CRITICAL 9.8 CVE-2022-34597 Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting. Ax1806 Firmware No fix yet Fix from $2,3002022-07-06 HIGH 7.5 CVE-2022-32033 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer. Ax1806 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32034 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist. M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32035EPSS 14% Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng. M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32036 Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the fun… M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32037 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg. M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32039 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient. M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32040 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm. M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32041 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData. M3 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32043 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo. M3 Firmware No fix yet Fix from $1,9502022-07-01 CRITICAL 9.8 CVE-2022-32032EPSS 10% Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule. Ax1806 Firmware No fix yet Fix from $2,3002022-07-01 HIGH 7.5 CVE-2022-32030 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand. Ax1806 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 7.5 CVE-2022-32031 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic. Ax1806 Firmware No fix yet Fix from $1,9502022-07-01 HIGH 8.8 CVE-2022-30023EPSS 39% Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function. Hg9 Firmware Mitigation only Fix from $1,9502022-06-16 HIGH 8.8 CVE-2022-30425EPSS 20% Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This… Hg6 Firmware No fix yet Fix from $1,9502022-06-02