Browse CVEs

HIGH 7.5 CVE-2022-24157 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to caus… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24158 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24159 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause … Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24160 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause … Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24161 Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to caus… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24162 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to ca… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24163 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a D… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 CRITICAL 9.8 CVE-2022-24144EPSS 19% Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows … Ax3 Firmware No fix yet Fix from $2,3002022-02-04 HIGH 7.5 CVE-2022-24142 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24143 Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerab… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24145 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2022-24146 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a D… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 CRITICAL 9.8 CVE-2021-44971 Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so… Ac15 Firmware Mitigation only Fix from $2,3002022-01-28 CRITICAL 9.8 CVE-2021-31755 KEVEPSS 86% An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows a… Ac11 Firmware after 02.03.01.104_cn Fix from $2,3002021-05-07 CRITICAL 9.8 CVE-2021-31756 An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allo… Ac11 Firmware after 02.03.01.104_cn Fix from $2,3002021-05-07 CRITICAL 9.8 CVE-2021-31757 An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows … Ac11 Firmware after 02.03.01.104_cn Fix from $2,3002021-05-07 CRITICAL 9.8 CVE-2021-31758EPSS 7% An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList all… Ac11 Firmware after 02.03.01.104_cn Fix from $2,3002021-05-07 CRITICAL 9.8 CVE-2021-27706 Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted… G1 Firmware No fix yet Fix from $2,3002021-04-14 CRITICAL 9.8 CVE-2021-27707 Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/… G1 Firmware No fix yet Fix from $2,3002021-04-14 CRITICAL 9.8 CVE-2021-27705 Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/… G1 Firmware No fix yet Fix from $2,3002021-04-14 MEDIUM 5.4 CVE-2021-3186 A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers … Ac5 Firmware No fix yet Fix from $1,6002021-01-26 MEDIUM 6.5 CVE-2020-35391EPSS 35% Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct reques… F3 Firmware No fix yet Fix from $1,6002021-01-01 HIGH 7.5 CVE-2020-28095 On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and… Ac6 Firmware No fix yet Fix from $1,9502020-12-30 CRITICAL 9.8 CVE-2020-15916 goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metachara… Ac15 Firmware No fix yet Fix from $2,3002020-07-23 CRITICAL 9.8 CVE-2020-10987 KEVEPSS 80% The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the device… Ac15 Firmware Mitigation only Fix from $2,3002020-07-13 CRITICAL 9.8 CVE-2020-10988 A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a … Ac15 Firmware No fix yet Fix from $2,3002020-07-13 MEDIUM 6.1 CVE-2020-10989 An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via … Ac15 Firmware No fix yet Fix from $1,6002020-07-13 MEDIUM 6.5 CVE-2020-10986 A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause de… Ac15 Firmware No fix yet Fix from $1,6002020-07-13 HIGH 7.5 CVE-2019-16288 On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash. N301 Firmware Mitigation only Fix from $1,9502019-09-13 HIGH 7.5 CVE-2018-14557 An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9)… Ac7 Firmware after 15.03.06.44_cn Fix from $1,9502019-04-25