Tenda Ac10 vulnerabilities, page 3

94 vulnerabilities

Known vulnerabilities in Tenda Ac10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2022-42168tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.EPSS1.11%9.8CriticalCVE-2022-42165tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.EPSS1.11%9.8CriticalCVE-2022-42167tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.EPSS1.10%9.8CriticalCVE-2022-42170tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.EPSS1.11%9.8CriticalCVE-2022-42169tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.EPSS1.11%7.5HighCVE-2022-46109tenda · ac10_firmwaretenda ac10_firmwareTenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.EPSS0.94%10CriticalCVE-2022-32054tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter.EPSS34.80%9.8CriticalCVE-2024-2856tenda · ac10_firmwareTenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflowA vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257780. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.16%9CriticalCVE-2024-2581tenda · ac10_firmwareTenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflowA vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function fromSetRouteStatic of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257081 was assigned to this vulnerability.EPSS1.30%9CriticalCVE-2024-11248tenda · ac10_firmwareTenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowA vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.26%9CriticalCVE-2024-11056tenda · ac10_firmwareTenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflowA vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13. Affected is the function FUN_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS1.08%9CriticalCVE-2024-11061tenda · ac10_firmwareTenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflowA vulnerability classified as critical was found in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function FUN_0044db3c of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.24%4.6MediumCVE-2024-25373tenda · ac10_firmwaretenda ac10_firmwareTenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function.EPSS0.43%7.5HighCVE-2024-10280tenda · ac10_firmware +9 moreTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereferenceA vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.80%7.5HighCVE-2024-32317tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.EPSS0.40%7.5HighCVE-2024-33365tenda · ac10_firmwaretenda ac10_firmwareBuffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the bin/httpd component.EPSS1.05%9CriticalCVE-2026-16248tenda · ac10_firmwareTenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflowA vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.EPSS0.85%10CriticalCVE-2026-19924tenda · ac10_firmwareTenda AC10 httpd R7WebsSecurityHandler improper authenticationA security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.EPSS1.42%8.8HighCVE-2026-5547tenda · ac10_firmwareTenda AC10 httpd formAddMacfilterRule os command injectionA vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.EPSS4.14%9CriticalCVE-2026-5548tenda · ac10_firmwareTenda AC10 httpd fromSysToolChangePwd stack-based overflowA vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.EPSS0.84%