Tenda Ac15 vulnerabilities, page 4
86 vulnerabilities
Known vulnerabilities in Tenda Ac15, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2024-2852tenda · ac15_firmwareTenda AC15 saveParentControlInfo stack-based overflowA vulnerability was found in Tenda AC15 15.03.20_multi. It has been declared as critical. This vulnerability affects the function saveParentControlInfo of the file /goform/saveParentControlInfo. The manipulation of the argument urls leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257776. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.30%CriticalCVE-2024-2805tenda · ac15_firmwareTenda AC15 SetSpeedWan formSetSpeedWan stack-based overflowA vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been rated as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257660. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.60%CriticalCVE-2024-10662tenda · ac15_firmwareTenda AC15 SetOnlineDevName formSetDeviceName stack-based overflowA vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS1.30%HighCVE-2024-10280tenda · ac10_firmware +9 moreTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereferenceA vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.80%CriticalCVE-2024-10661tenda · ac15_firmwareTenda AC15 SetDlnaCfg stack-based overflowA vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS1.16%HighCVE-2024-32303tenda · ac15_firmwaretenda ac15_firmwareTenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.EPSS0.43%MediumCVE-2024-30613tenda · ac15_firmwaretenda ac15_firmwareTenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function.EPSS0.36%HighCVE-2024-30645tenda · ac15_firmwaretenda ac15_firmwareTenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.EPSS1.05%MediumCVE-2024-30840tenda · ac15_firmwaretenda ac15_firmwareA Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function.EPSS0.30%MediumCVE-2026-11493tenda · ac15_firmwareTenda AC15 Samba smb.conf weak passwordA weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks.EPSS0.22%CriticalCVE-2026-4975tenda · ac15_firmwareTenda AC15 POST Request setcfm formSetCfm memory corruptionA vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS1.01%CriticalCVE-2026-5830tenda · ac15_firmwareTenda AC15 SysToolChangePwd websGetVar stack-based overflowA vulnerability was identified in Tenda AC15 15.03.05.18. This affects the function websGetVar of the file /goform/SysToolChangePwd. Such manipulation of the argument oldPwd/newPwd/cfmPwd leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.EPSS1.00%CriticalCVE-2026-24105tenda · ac15_firmwaretenda ac15_firmwareAn issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a command injection vulnerability if injected into doSystemCmd.EPSS1.81%CriticalCVE-2026-24103tenda · ac15_firmwaretenda ac15_firmwareA buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.EPSS0.44%CriticalCVE-2026-24101tenda · ac15_firmwaretenda ac15_firmwareAn issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability.EPSS1.77%CriticalCVE-2026-3400tenda · ac15_firmwareTenda AC15 TextEditingConversion stack-based overflowA security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapsk_crypto2_4g results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.EPSS1.12%CriticalCVE-2023-36103tenda · ac15_firmwaretenda ac15_firmwareCommand Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.EPSS1.44%CriticalCVE-2023-39673tenda · ac15_firmwaretenda ac15_firmwareTenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().EPSS0.76%CriticalCVE-2023-30373tenda · ac15_firmwaretenda ac15_firmwareIn Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability.EPSS0.84%CriticalCVE-2023-30375tenda · ac15_firmwaretenda ac15_firmwareIn Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability.EPSS0.76%