VYPR

AC10U

by Tenda

CVEs (14)

  • CVE-2024-32306Apr 17, 2024
    risk 0.00cvss epss 0.00

    Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

  • CVE-2024-30612Mar 28, 2024
    risk 0.00cvss epss 0.00

    Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.

  • CVE-2024-2853Mar 24, 2024
    risk 0.00cvss epss 0.01

    A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. It has been rated as critical. This issue affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. The attack may be initiated…

  • CVE-2024-2764Mar 21, 2024
    risk 0.00cvss epss 0.00

    A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument endIP leads to stack-based buffer overflow. It is possible to initiate the…

  • CVE-2024-2763Mar 21, 2024
    risk 0.00cvss epss 0.00

    A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.48. Affected by this issue is the function formSetCfm of the file goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched…

  • CVE-2024-2711Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be…

  • CVE-2024-2710Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime leads to stack-based buffer overflow. The attack…

  • CVE-2024-2709Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability was found in Tenda AC10U 15.03.06.49. It has been classified as critical. Affected is the function fromSetRouteStatic of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the…

  • CVE-2024-2708Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely.…

  • CVE-2024-2707Mar 20, 2024
    risk 0.00cvss epss 0.02

    A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated…

  • CVE-2024-2706Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formWifiWpsStart of the file /goform/WifiWpsStart. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the…

  • CVE-2024-2705Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack…

  • CVE-2024-2704Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be…

  • CVE-2024-2703Mar 20, 2024
    risk 0.00cvss epss 0.00

    A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack…