Tenda Ax1806 vulnerabilities, page 3
61 vulnerabilities
Known vulnerabilities in Tenda Ax1806, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2024-4237tenda · ax1806_firmwareTenda AX1806 execCommand R7WebsSecurityHandler stack-based overflowA vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262128. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.45%CriticalCVE-2024-4239tenda · ax1806_firmwareTenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflowA vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-262130 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.45%CriticalCVE-2024-4238tenda · ax1806_firmwareTenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflowA vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262129 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.45%CriticalCVE-2024-44551tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.EPSS0.63%CriticalCVE-2024-44553tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.EPSS0.63%CriticalCVE-2024-44549tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.EPSS0.38%CriticalCVE-2024-44556tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.EPSS0.38%CriticalCVE-2024-44565tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.EPSS0.61%CriticalCVE-2024-44555tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.EPSS0.73%CriticalCVE-2024-44563tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.EPSS0.61%CriticalCVE-2024-44558tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.EPSS0.63%CriticalCVE-2024-44557tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.EPSS0.61%CriticalCVE-2024-44552tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.EPSS0.38%CriticalCVE-2024-44550tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.EPSS0.63%HighCVE-2024-35579tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.EPSS0.42%MediumCVE-2024-35576tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.EPSS0.32%CriticalCVE-2024-35580tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.EPSS0.57%HighCVE-2024-35578tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.EPSS0.43%CriticalCVE-2024-35571tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.EPSS0.57%CriticalCVE-2023-47456tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.EPSS0.80%