Tenda Ax1803 vulnerabilities, page 2
60 vulnerabilities
Known vulnerabilities in Tenda Ax1803, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-37820tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS.EPSS0.34%HighCVE-2022-45781tenda · ax1803_firmwaretenda ax1803_firmwareBuffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName.EPSS0.74%HighCVE-2022-28572tenda · ax1803_firmware +1 moretenda ax1803_firmwareTenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` functionEPSS2.64%HighCVE-2022-30040tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.EPSS1.89%CriticalCVE-2022-34595tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.EPSS2.41%CriticalCVE-2022-34596tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.EPSS2.41%CriticalCVE-2024-4236tenda · ax1803_firmwareTenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflowA vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /goform/SetDDNSCfg. The manipulation of the argument serverName/ddnsUser/ddnsPwd/ddnsDomain leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262127. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS14.88%CriticalCVE-2024-30621tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan.EPSS0.74%CriticalCVE-2024-30620tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.EPSS0.82%CriticalCVE-2026-1329tenda · ax1803_firmwareTenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflowA flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.EPSS1.20%CriticalCVE-2023-51964tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.EPSS0.70%CriticalCVE-2023-51955tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.EPSS0.46%CriticalCVE-2023-51968tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.EPSS0.73%CriticalCVE-2023-51967tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.EPSS0.73%CriticalCVE-2023-51963tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.EPSS0.87%CriticalCVE-2023-51960tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.EPSS0.70%CriticalCVE-2023-51971tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.EPSS0.70%CriticalCVE-2023-51953tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.EPSS0.70%CriticalCVE-2023-51972tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.EPSS1.89%CriticalCVE-2023-51966tenda · ax1803_firmwaretenda ax1803_firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.EPSS0.70%