← Back

Ac6 Firmware

ac6_firmware

Vendor: Tenda • 108 CVEs

CVEs (108)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-10280
1Tenda
10Ac10 Firmware
Ac10u FirmwareAc1206 Firmware+7 more
Nov 1, 2024
Oct 23, 2024
7.1 HIGH· v4
7.5 HIGH· v3
6.8 MEDIUM· v2
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV...Show more
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2023-24332
1Tenda
1Ac6 Firmware
Mar 25, 2025
Feb 21, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet.
CVE-2023-38823
1Tenda
4Ac18 Firmware
Ac19 FirmwareAc6 Firmware+1 more
Jun 10, 2025
Nov 20, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVE-2023-40830
1Tenda
1Ac6 Firmware
Jun 17, 2025
Oct 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
CVE-2021-40546
1Tenda
1Ac6 Firmware
Nov 21, 2024
Sep 5, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long string in the wifiPwd_5G parameter to /goform/setWifi.
CVE-2023-40848
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858."
CVE-2023-40847
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function wi...Show more
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check.Show less
CVE-2023-40845
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length che...Show more
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks.Show less
CVE-2023-40844
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'
CVE-2023-40843
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."
CVE-2023-40842
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."
CVE-2023-40841
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node,"
CVE-2023-40840
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."
CVE-2023-40839
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fi...Show more
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute commands.Show less
CVE-2023-40838
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.
CVE-2023-40837
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fi...Show more
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands.Show less
CVE-2023-40846
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
CVE-2023-39670
1Tenda
1Ac6 Firmware
Nov 21, 2024
Aug 18, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
CVE-2023-38937
1Tenda
7Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+4 more
Nov 21, 2024
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to conta...Show more
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.Show less
CVE-2023-38936
1Tenda
9Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+6 more
Nov 21, 2024
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a s...Show more
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.Show less