Vulnerability index

Browse CVEs

1,819 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ax3 Firmware HIGH 7.5
CVE-2022-24157

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to caus…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24158

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24159

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause …

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24160

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause …

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24161

Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to caus…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24162

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to ca…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24163

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a D…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware CRITICAL 9.8
CVE-2022-24144EPSS 19%

Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows …

No fix yet
Fix from $2,300 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24142

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24143

Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerab…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24145

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a…

No fix yet
Fix from $1,950 2022-02-04
Ax3 Firmware HIGH 7.5
CVE-2022-24146

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a D…

No fix yet
Fix from $1,950 2022-02-04
Ac15 Firmware CRITICAL 9.8
CVE-2021-44971

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so…

Mitigation only
Fix from $2,300 2022-01-28
Ac11 Firmware CRITICAL 9.8
CVE-2021-31755 KEVEPSS 86%

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows a…

Fix: after 02.03.01.104_cn
Fix from $2,300 2021-05-07
Ac11 Firmware CRITICAL 9.8
CVE-2021-31756

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allo…

Fix: after 02.03.01.104_cn
Fix from $2,300 2021-05-07
Ac11 Firmware CRITICAL 9.8
CVE-2021-31757

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows …

Fix: after 02.03.01.104_cn
Fix from $2,300 2021-05-07
Ac11 Firmware CRITICAL 9.8
CVE-2021-31758EPSS 7%

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList all…

Fix: after 02.03.01.104_cn
Fix from $2,300 2021-05-07
G1 Firmware CRITICAL 9.8
CVE-2021-27706

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted…

No fix yet
Fix from $2,300 2021-04-14
G1 Firmware CRITICAL 9.8
CVE-2021-27707

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/…

No fix yet
Fix from $2,300 2021-04-14
G1 Firmware CRITICAL 9.8
CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/…

No fix yet
Fix from $2,300 2021-04-14
Ac5 Firmware MEDIUM 5.4
CVE-2021-3186

A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers …

No fix yet
Fix from $1,600 2021-01-26
F3 Firmware MEDIUM 6.5
CVE-2020-35391EPSS 35%

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct reques…

No fix yet
Fix from $1,600 2021-01-01
Ac6 Firmware HIGH 7.5
CVE-2020-28095

On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and…

No fix yet
Fix from $1,950 2020-12-30
Ac15 Firmware CRITICAL 9.8
CVE-2020-15916

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metachara…

No fix yet
Fix from $2,300 2020-07-23
Ac15 Firmware CRITICAL 9.8
CVE-2020-10987 KEVEPSS 80%

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the device…

Mitigation only
Fix from $2,300 2020-07-13
Ac15 Firmware CRITICAL 9.8
CVE-2020-10988

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a …

No fix yet
Fix from $2,300 2020-07-13
Ac15 Firmware MEDIUM 6.1
CVE-2020-10989

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via …

No fix yet
Fix from $1,600 2020-07-13
Ac15 Firmware MEDIUM 6.5
CVE-2020-10986

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause de…

No fix yet
Fix from $1,600 2020-07-13
N301 Firmware HIGH 7.5
CVE-2019-16288

On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.

Mitigation only
Fix from $1,950 2019-09-13
Ac7 Firmware HIGH 7.5
CVE-2018-14557

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9)…

Fix: after 15.03.06.44_cn
Fix from $1,950 2019-04-25