Vulnerability index

Browse CVEs

1,819 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ax12 Firmware CRITICAL 9.8
CVE-2022-28082EPSS 9%

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.

No fix yet
Fix from $2,300 2022-05-04
Ac9 Firmware CRITICAL 9.8
CVE-2022-28560

There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attac…

No fix yet
Fix from $2,300 2022-05-03
Ax12 Firmware CRITICAL 9.8
CVE-2022-28561EPSS 10%

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker…

No fix yet
Fix from $2,300 2022-05-03
Ax1806 Firmware HIGH 8.8
CVE-2022-28572

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function

No fix yet
Fix from $1,950 2022-05-02
Ax12 Firmware MEDIUM 6.5
CVE-2022-27374

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.

No fix yet
Fix from $1,600 2022-04-25
Ax12 Firmware MEDIUM 6.5
CVE-2022-27375

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at /goform/WifiExtraSet.

No fix yet
Fix from $1,600 2022-04-25
Ac9 Firmware CRITICAL 9.8
CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a s…

No fix yet
Fix from $2,300 2022-04-07
Ac9 Firmware CRITICAL 9.8
CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.

No fix yet
Fix from $2,300 2022-04-07
Ac9 Firmware CRITICAL 9.8
CVE-2022-26278

Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.

No fix yet
Fix from $2,300 2022-03-28
M3 Firmware CRITICAL 9.8
CVE-2022-26289

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-26290

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-26536

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27076

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27077

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27078

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27079

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27080

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27081

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27082

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.

No fix yet
Fix from $2,300 2022-03-24
M3 Firmware CRITICAL 9.8
CVE-2022-27083

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.

No fix yet
Fix from $2,300 2022-03-24
Ac9 Firmware CRITICAL 9.8
CVE-2022-25431

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25433

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25434EPSS 9%

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25435

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25437

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25439

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.

No fix yet
Fix from $2,300 2022-03-18
Ac9 Firmware CRITICAL 9.8
CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function.

No fix yet
Fix from $2,300 2022-03-18
Ac6 Firmware CRITICAL 9.8
CVE-2022-25445EPSS 9%

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.

No fix yet
Fix from $2,300 2022-03-18