VYPR

Ac6 Firmware

by Tenda

CVEs (176)

  • CVE-2023-38933CriAug 7, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

  • CVE-2023-38931CriAug 7, 2023
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the…

  • CVE-2022-37176CriAug 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard.

  • CVE-2022-25461CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function.

  • CVE-2022-25460CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function.

  • CVE-2022-25459CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function.

  • CVE-2022-25458CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function.

  • CVE-2022-25457CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.

  • CVE-2022-25456CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function.

  • CVE-2022-25455CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.

  • CVE-2022-25454CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function.

  • CVE-2022-25453CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function.

  • CVE-2022-25452CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function.

  • CVE-2022-25451CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function.

  • CVE-2022-25449CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.

  • CVE-2022-25448CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function.

  • CVE-2022-25447CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.

  • CVE-2022-25446CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.02

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function.

  • CVE-2022-25445CriMar 18, 2022
    risk 0.64cvss 9.8epss 0.09

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.

  • CVE-2021-45401CriFeb 18, 2022
    risk 0.64cvss 9.8epss 0.03

    A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the…

Page 3 of 9