Filtered by vendor Tenda Subscriptions
Total 870 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-36587 1 Tenda 2 G3, G3 Firmware 2024-08-03 9.8 Critical
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
CVE-2022-36570 1 Tenda 2 Ac9, Ac9 Firmware 2024-08-03 7.2 High
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.
CVE-2022-36586 1 Tenda 2 G3, G3 Firmware 2024-08-03 9.8 Critical
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
CVE-2022-36584 1 Tenda 2 G3, G3 Firmware 2024-08-03 9.8 Critical
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
CVE-2022-36568 1 Tenda 2 Ac9, Ac9 Firmware 2024-08-03 8.8 High
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList.
CVE-2022-36569 1 Tenda 2 Ac9, Ac9 Firmware 2024-08-03 8.8 High
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg.
CVE-2022-36273 1 Tenda 2 Ac9, Ac9 Firmware 2024-08-03 9.8 Critical
Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg.
CVE-2022-35557 1 Tenda 2 W6, W6 Firmware 2024-08-03 7.5 High
A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35555 1 Tenda 2 W6, W6 Firmware 2024-08-03 9.8 Critical
A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.
CVE-2022-35559 1 Tenda 2 W6, W6 Firmware 2024-08-03 9.8 Critical
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution.
CVE-2022-35560 1 Tenda 2 W6, W6 Firmware 2024-08-03 7.5 High
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35558 1 Tenda 2 W6, W6 Firmware 2024-08-03 7.5 High
A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35561 1 Tenda 2 W6, W6 Firmware 2024-08-03 7.5 High
A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35201 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVE-2022-34596 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-08-03 9.8 Critical
Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-34597 1 Tenda 2 Ax1806, Ax1806 Firmware 2024-08-03 9.8 Critical
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-34595 1 Tenda 2 Ax1803, Ax1803 Firmware 2024-08-03 9.8 Critical
Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.
CVE-2022-32040 1 Tenda 2 M3, M3 Firmware 2024-08-03 7.5 High
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
CVE-2022-32035 1 Tenda 2 M3, M3 Firmware 2024-08-03 7.5 High
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.
CVE-2022-32030 1 Tenda 2 Ax1806, Ax1806 Firmware 2024-08-03 7.5 High
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.