Tendacn vulnerabilities, page 5

146 vulnerabilities

Known vulnerabilities in Tendacn products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.

7.5HighCVE-2022-45653tendacn · ac6_firmwaretendacn ac6_firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the page parameter in the fromNatStaticSetting function.EPSS0.85%7.5HighCVE-2022-45654tendacn · ac6_firmwaretendacn ac6_firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the ssid parameter in the form_fast_setting_wifi_set function.EPSS0.85%8.8HighCVE-2022-32384tendacn · ac23_ac2100_firmwaretendacn ac23_ac2100_firmwareTenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.EPSS0.60%9.8CriticalCVE-2022-32385tendacn · ac23_ac2100_firmwaretendacn ac23_ac2100_firmwareTenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).EPSS2.05%9.8CriticalCVE-2022-32383tendacn · ac23_ac2100_firmwaretendacn ac23_ac2100_firmwareTenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.EPSS1.52%9.8CriticalCVE-2022-32386tendacn · ac23_ac2100_firmwaretendacn ac23_ac2100_firmwareTenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.EPSS10.15%3.5LowCVE-2017-9139tendacn · f1200_firmware +2 moretendacn f1200_firmwareThere is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds.EPSS0.37%8HighCVE-2017-9138tendacn · f1200_firmware +2 moretendacn f1200_firmwareThere is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.EPSS0.69%7.5HighCVE-2024-41465tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.EPSS0.55%9.8CriticalCVE-2024-41460tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.EPSS0.57%9.8CriticalCVE-2024-41468tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommandEPSS4.57%7.5HighCVE-2024-41466tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.EPSS0.55%9.8CriticalCVE-2024-41459tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.EPSS0.61%7.5HighCVE-2024-41462tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.EPSS0.55%9.8CriticalCVE-2024-41464tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStaticEPSS0.57%7.5HighCVE-2024-41463tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.EPSS0.52%9.8CriticalCVE-2024-41473tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMacEPSS6.75%9.8CriticalCVE-2024-41461tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.EPSS0.63%7.5HighCVE-2024-42949tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.EPSS0.55%7.5HighCVE-2024-42954tendacn · fh1201_firmwaretendacn fh1201_firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.EPSS0.55%