VYPR

Vendor CVEs

Tenda

All CVEs

2,140 total · sorted by risk
  • CVE-2024-4126HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument manualTime leads to stack-based buffer overflow. The attack may be initiated…

  • CVE-2024-4125HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the function formSetStaticRoute of the file /goform/setStaticRoute. The manipulation of the argument staticRouteIndex leads to stack-based buffer overflow. The attack…

  • CVE-2024-4124HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. This affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. It is possible to…

  • CVE-2024-4123HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function formSetPortMapping of the file /goform/SetPortMapping. The manipulation of the argument portMappingServer/portMappingProtocol/portMappingWan/porMappi…

  • CVE-2024-4122HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack can be…

  • CVE-2024-4121HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected is the function formQOSRuleDel. The manipulation of the argument qosIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The identifier of this…

  • CVE-2024-4120HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This issue affects the function formIPMacBindModify of the file /goform/modifyIpMacBind. The manipulation of the argument IPMacBindRuleId/IPMacBindRuleIp/IPMacBindRuleMac/IPMacBindRuleRemark leads…

  • CVE-2024-4119HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. This vulnerability affects the function formIPMacBindDel of the file /goform/delIpMacBind. The manipulation of the argument IPMacBindIndex leads to stack-based buffer overflow. The attack can…

  • CVE-2024-4118HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the file /goform/addIpMacBind. The manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to initiate…

  • CVE-2024-4117HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file /goform/DelPortMapping. The manipulation of the argument portMappingIndex leads to stack-based buffer overflow. The attack may be…

  • CVE-2024-4116HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file /goform/DelDhcpRule. The manipulation of the argument delDhcpIndex leads to stack-based buffer overflow. The attack can…

  • CVE-2024-4115HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsForward. The manipulation of the argument DnsForwardRule leads to stack-based buffer overflow. It is possible to launch the…

  • CVE-2024-4114HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub_42C014 of the file /goform/PowerSaveSet. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be initiated…

  • CVE-2024-4113HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub_42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be initiated remotely. The…

  • CVE-2024-4112HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub_42CB94 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack…

  • CVE-2024-4111HigApr 24, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub_42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be launched remotely.…

  • CVE-2024-4066HigApr 23, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName leads to stack-based buffer…

  • CVE-2024-4065HigApr 23, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be initiated…

  • CVE-2024-4064HigApr 23, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. The attack can be…

  • CVE-2024-33212HigApr 23, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm.

  • CVE-2024-4020HigApr 20, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument entrys leads to buffer overflow. The attack may be initiated remotely. The exploit…

  • CVE-2024-32305HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

  • CVE-2024-32299HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

  • CVE-2024-32292HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

  • CVE-2024-32281HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.

  • CVE-2024-3910HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307). Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack…

  • CVE-2024-3909HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be…

  • CVE-2024-3907HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely.…

  • CVE-2024-3906HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be…

  • CVE-2024-3905HigApr 17, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate…

  • CVE-2024-3882HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the…

  • CVE-2024-3881HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely.…

  • CVE-2024-3879HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633). This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack…

  • CVE-2024-3878HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow.…

  • CVE-2024-3877HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. The attack can be launched…

  • CVE-2024-3876HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely.…

  • CVE-2024-3875HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The…

  • CVE-2024-3874HigApr 16, 2024
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack…

  • CVE-2024-30891HigApr 5, 2024
    risk 0.57cvss 8.8epss 0.02

    A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.

  • CVE-2024-30637HigMar 29, 2024
    risk 0.57cvss 8.8epss 0.02

    Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.

  • CVE-2024-30627HigMar 29, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo function.

  • CVE-2024-30624HigMar 29, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function.

  • CVE-2024-30599HigMar 28, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.

  • CVE-2024-30591HigMar 28, 2024
    risk 0.57cvss 8.8epss 0.01

    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.

  • CVE-2024-3012HigMar 28, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been declared as critical. This vulnerability affects the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack…

  • CVE-2024-3011HigMar 28, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate…

  • CVE-2024-3010HigMar 28, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this issue is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely.…

  • CVE-2024-3008HigMar 27, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7(775). Affected is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to launch the attack…

  • CVE-2024-3007HigMar 27, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7(775). This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack may…

  • CVE-2024-3006HigMar 27, 2024
    risk 0.57cvss 8.8epss 0.02

    A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function fromSetRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument entrys leads to stack-based buffer overflow. The attack can be…

Page 24 of 43