VYPR

Ac1206 Firmware

by Tenda

CVEs (44)

  • CVE-2025-10432CriSep 15, 2025
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the argument wanMTU results in stack-based buffer overflow.…

  • CVE-2025-9523CriAug 27, 2025
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The…

  • CVE-2023-38937CriAug 7, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the…

  • CVE-2023-38936CriAug 7, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the…

  • CVE-2023-38935CriAug 7, 2023
    Tenda
    AC5
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.

  • CVE-2023-38933CriAug 7, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

  • CVE-2023-38931CriAug 7, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the…

  • CVE-2023-37717CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

  • CVE-2023-37716CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.

  • CVE-2023-37712CriJul 10, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function.

  • CVE-2023-37711CriJul 10, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.

  • CVE-2023-37710CriJul 10, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.

  • CVE-2022-37816CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind.

  • CVE-2022-37815CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex.

  • CVE-2022-37814CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter.

  • CVE-2022-37813CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime.

  • CVE-2022-37812CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg.

  • CVE-2022-37811CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer.

  • CVE-2022-37810CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.03

    Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.

  • CVE-2022-37809CriAug 25, 2022
    Tenda
    AC1206
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan.

Page 1 of 3