Tenda Ac9 vulnerabilities, page 3

94 vulnerabilities

Known vulnerabilities in Tenda Ac9, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2022-36569tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg.EPSS1.10%9.8CriticalCVE-2022-36273tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg.EPSS2.38%7.2HighCVE-2022-36570tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.EPSS1.09%10CriticalCVE-2022-25439tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.EPSS1.69%10CriticalCVE-2022-25429tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function.EPSS1.69%10CriticalCVE-2022-25427tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.EPSS1.69%10CriticalCVE-2022-25417tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo.EPSS1.76%10CriticalCVE-2022-25440tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.EPSS1.69%10CriticalCVE-2022-25437tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.EPSS1.69%10CriticalCVE-2022-25431tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.EPSS1.69%10CriticalCVE-2022-25433tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function.EPSS1.69%10CriticalCVE-2022-25428tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.EPSS1.69%10CriticalCVE-2022-25441tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function.EPSS4.95%10CriticalCVE-2022-25414tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.EPSS10.44%10CriticalCVE-2022-25435tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function.EPSS1.69%10CriticalCVE-2022-25434tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function.EPSS9.13%10CriticalCVE-2022-25438tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function.EPSS4.95%10CriticalCVE-2022-25418tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.EPSS1.76%10CriticalCVE-2022-27022tenda · ac9_firmwaretenda ac9_firmwareThere is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root shell through a constructed payload.EPSS1.69%10CriticalCVE-2022-27016tenda · ac9_firmwaretenda ac9_firmwareThere is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.EPSS1.69%