Tenda

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-24144 1Tenda 1Ax3 Firmware Nov 21, 2024 Feb 4, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2...Show more Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters.Show less
CVE-2022-24143 1Tenda 2Ax12 Firmware Ax3 Firmware Nov 21, 2024 Feb 4, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZ...Show more Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.Show less
CVE-2022-24142 1Tenda 1Ax3 Firmware Nov 21, 2024 Feb 4, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the firewallEn parameter.
CVE-2021-44971 1Tenda 2Ac15 Firmware Ac5 Firmware Nov 21, 2024 Jan 28, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it...Show more Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.Show less
CVE-2021-31758 1Tenda 1Ac11 Firmware Nov 21, 2024 May 7, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted pos...Show more An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.Show less
CVE-2021-31757 1Tenda 1Ac11 Firmware Nov 21, 2024 May 7, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post re...Show more An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request.Show less
CVE-2021-31756 1Tenda 1Ac11 Firmware Nov 21, 2024 May 7, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post...Show more An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable.Show less
CVE-2021-31755 1Tenda 1Ac11 Firmware Nov 10, 2025 May 7, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post req...Show more An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.Show less
CVE-2021-27707 1Tenda 2G1 Firmware G3 Firmware Nov 21, 2024 Apr 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping...Show more Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without limit.Show less
CVE-2021-27706 1Tenda 2G1 Firmware G3 Firmware Nov 21, 2024 Apr 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBin...Show more Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without limit.Show less
CVE-2021-27705 1Tenda 2G1 Firmware G3 Firmware Nov 21, 2024 Apr 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function d...Show more Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit.Show less
CVE-2021-3186 1Tenda 1Ac5 Firmware Jul 7, 2025 Jan 26, 2021 N/A· v4 5.4 MEDIUM· v3 4.3 MEDIUM· v2 A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter.
CVE-2020-35391 1Tenda 1F3 Firmware Nov 21, 2024 Jan 1, 2021 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14...Show more Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.Show less
CVE-2020-28095 1Tenda 1Ac6 Firmware Jul 7, 2025 Dec 30, 2020 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.
CVE-2020-15916 1Tenda 1Ac15 Firmware Nov 21, 2024 Jul 23, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter.
CVE-2020-10989 1Tenda 1Ac15 Firmware Nov 21, 2024 Jul 13, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter.
CVE-2020-10988 1Tenda 1Ac15 Firmware Nov 21, 2024 Jul 13, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.
CVE-2020-10987 1Tenda 1Ac15 Firmware Nov 7, 2025 Jul 13, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
CVE-2020-10986 1Tenda 1Ac15 Firmware Nov 21, 2024 Jul 13, 2020 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page...Show more A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page.Show less
CVE-2019-16288 1Tenda 1N301 Firmware Nov 21, 2024 Sep 13, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.

Previous 1...88 89 909192 Next