Tendacn vulnerabilities
146 vulnerabilities
Known vulnerabilities in Tendacn products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.
Products
24- G328 vulnerabilities
- Ac627 vulnerabilities
- Ac10U23 vulnerabilities
- G123 vulnerabilities
- Ac1520 vulnerabilities
- Ac1818 vulnerabilities
- Ac917 vulnerabilities
- Fh120115 vulnerabilities
- Ac107 vulnerabilities
- A3014 vulnerabilities
- Ac23 Ac21004 vulnerabilities
- Pa64 vulnerabilities
- Ac12002 vulnerabilities
- Ac72 vulnerabilities
- Ac9V1.02 vulnerabilities
- F12002 vulnerabilities
- F12022 vulnerabilities
- Fh12022 vulnerabilities
- Adsl1 vulnerabilities
- Cp31 vulnerabilities
- D1521 vulnerabilities
- G01 vulnerabilities
- I291 vulnerabilities
- N3011 vulnerabilities
CVE-2018-16334tendacnac10_firmware+1
EPSS score3.62%
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.CVE-2018-16333tendacnac10_firmware+4EPSS score1.74%
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is directly used in a sprintf call to a local variable placed on the stack, which overrides the return address of the function, causing a buffer overflow.CVE-2018-20373tendacnadsl_firmwareEPSS score0.59%
Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client.CVE-2018-14497tendacnd152_firmwareEPSS score1.64%
Tenda D152 ADSL routers allow XSS via a crafted SSID.CVE-2018-14492tendacnac10_firmware+4EPSS score1.12%
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.CVE-2018-7561tendacnac9_firmwareEPSS score1.75%
Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of service or possibly have unspecified other impact.CVE-2018-5768tendacnac15_firmwareEPSS score3.50%
A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.CVE-2018-5767tendacnac15_firmwareEPSS score47.37%
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header.CVE-2018-5770tendacnac15_firmwareEPSS score2.69%
An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to log in.CVE-2021-31627tendacnac9_firmwareEPSS score1.14%
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.CVE-2021-31624tendacnac9_firmwareEPSS score1.14%
Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter.CVE-2021-27691tendacng0_firmware+2EPSS score25.37%
Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This occurs because the "formSetDebugCfg" function executes glibc's system function with untrusted input.CVE-2021-27692tendacng1_firmware+1EPSS score3.19%
Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the "doSystemCmd" function with untrusted input.CVE-2021-38278tendacnac10_firmwareEPSS score1.41%
Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function.CVE-2021-38772tendacnac10_firmwareEPSS score1.21%
Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.CVE-2021-44352tendacnac15_firmwareEPSS score13.38%
A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind.CVE-2021-45994tendacng1_firmware+1EPSS score1.05%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the delDhcpIndex parameter.CVE-2021-45987tendacng1_firmware+1EPSS score1.87%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.CVE-2021-45988tendacng1_firmware+1EPSS score1.05%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsForwardRule parameter.CVE-2021-45993tendacng1_firmware+1EPSS score1.05%
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRuleIP and IPMacBindRuleMac parameters.