Tenda Ac6 vulnerabilities, page 4

109 vulnerabilities

Known vulnerabilities in Tenda Ac6, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CriticalCVE-2022-25459tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function.EPSS1.69%10CriticalCVE-2022-25457tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.EPSS1.69%10CriticalCVE-2022-25446tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function.EPSS1.69%10CriticalCVE-2022-25448tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function.EPSS1.69%10CriticalCVE-2022-25454tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function.EPSS1.69%10CriticalCVE-2022-25458tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function.EPSS1.69%10CriticalCVE-2022-25456tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function.EPSS1.69%6.5MediumCVE-2022-45673tenda · ac6_firmwaretenda ac6_firmwareTenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.EPSS0.34%6.5MediumCVE-2022-45674tenda · ac6_firmwaretenda ac6_firmwareTenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.EPSS0.34%7.5HighCVE-2022-45640tenda · ac6_firmwaretenda ac6_firmwareTenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).EPSS1.06%7.5HighCVE-2022-45641tenda · ac6_firmwaretenda ac6_firmwareTenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg.EPSS0.85%9.8CriticalCVE-2024-52714tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.EPSS0.56%9.8CriticalCVE-2024-52274shenzhen tenda technology co · tenda ac6v2 +1 moreDenial of Service on Tenda AC6V2 Due To Stack OverflowStack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50EPSS0.45%9.8CriticalCVE-2024-52273shenzhen tenda technology co · tenda ac6v2 +1 moreDenial of Service on Tenda AC6V2 Due To Stack OverflowStack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50EPSS0.45%9.8CriticalCVE-2024-52272shenzhen tenda technology co · tenda ac6v2 +1 moreDenial of Service on Tenda AC6V2 Due To Stack OverflowStack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50EPSS0.45%9.8CriticalCVE-2024-52275shenzhen tenda technology co · tenda ac6v2 +1 moreDenial of Service on Tenda AC6V2 Due To Stack OverflowStack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.EPSS0.59%8.8HighCVE-2024-51116tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.EPSS0.42%8.1HighCVE-2024-46450tenda · ac6_firmwaretenda ac6_firmwareIncorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request.EPSS0.36%9.8CriticalCVE-2024-10698tenda · ac6_firmwareTenda AC6 SetOnlineDevName formSetDeviceName stack-based overflowA vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.28%7.5HighCVE-2024-10280tenda · ac10_firmware +9 moreTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereferenceA vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.80%