AX1806

CVEs (65)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-44557	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
CVE-2024-44555	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
CVE-2024-44553	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
CVE-2024-44552	Tenda AX1806	Cri	0.64	9.8	0.00	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.
CVE-2024-44551	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
CVE-2024-44550	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
CVE-2024-44549	Tenda AX1806	Cri	0.64	9.8	0.00	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
CVE-2024-44558	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
CVE-2024-44556	Tenda AX1806	Cri	0.64	9.8	0.00	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
CVE-2024-44565	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.
CVE-2024-44563	Tenda AX1806	Cri	0.64	9.8	0.01	Aug 26, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
CVE-2024-40416	Tenda AX1806	Cri	0.64	9.8	0.01	Jul 15, 2024	A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVE-2024-40415	Tenda AX1806	Cri	0.64	9.8	0.00	Jul 15, 2024	A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVE-2024-40414	Tenda AX1806	Cri	0.64	9.8	0.00	Jul 15, 2024	A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVE-2024-35580	Tenda AX1806	Cri	0.64	9.8	0.01	May 20, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
CVE-2024-35571	Tenda AX1806	Cri	0.64	9.8	0.01	May 20, 2024	Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
CVE-2022-34597	Tenda AX1806	Cri	0.64	9.8	0.02	Jul 6, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-32032	Tenda AX1806	Cri	0.64	9.8	0.09	Jul 1, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule.
CVE-2023-47456	Tenda AX1806	Cri	0.59	9.1	0.01	Nov 7, 2023	Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.
CVE-2023-47455	Tenda AX1806	Cri	0.59	9.1	0.01	Nov 7, 2023	Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.

CVE-2024-44557CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
CVE-2024-44555CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
CVE-2024-44553CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
CVE-2024-44552CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.00
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.
CVE-2024-44551CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
CVE-2024-44550CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
CVE-2024-44549CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.00
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
CVE-2024-44558CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
CVE-2024-44556CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.00
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
CVE-2024-44565CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.
CVE-2024-44563CriAug 26, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
CVE-2024-40416CriJul 15, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVE-2024-40415CriJul 15, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.00
A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVE-2024-40414CriJul 15, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.00
A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVE-2024-35580CriMay 20, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
CVE-2024-35571CriMay 20, 2024
Tenda
AX1806
risk 0.64cvss 9.8epss 0.01
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
CVE-2022-34597CriJul 6, 2022
Tenda
AX1806
risk 0.64cvss 9.8epss 0.02
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-32032CriJul 1, 2022
Tenda
AX1806
risk 0.64cvss 9.8epss 0.09
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule.
CVE-2023-47456CriNov 7, 2023
Tenda
AX1806
risk 0.59cvss 9.1epss 0.01
Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.
CVE-2023-47455CriNov 7, 2023
Tenda
AX1806
risk 0.59cvss 9.1epss 0.01
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.

Page 1 of 4