Vendor CVEs

Tenda

All CVEs

2,140 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-32030	Tenda AX1806	Hig	0.49	7.5	0.01	Jul 1, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.
CVE-2022-30475	Tenda AC Series Router AC18	Hig	0.49	7.5	0.01	May 26, 2022	Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.
CVE-2022-30473	Tenda AC Series Router	Hig	0.49	7.5	0.01	May 26, 2022	Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
CVE-2022-30033	Tenda Tx9 Pro Firmware	Hig	0.49	7.5	0.01	May 18, 2022	Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
CVE-2022-28917	Tenda AX12	Hig	0.49	7.5	0.10	May 18, 2022	Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.
CVE-2022-30040	Tenda AX1803	Hig	0.49	7.5	0.02	May 11, 2022	Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer…
CVE-2022-28973	Tenda AX1806	Hig	0.49	7.5	0.01	May 6, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28972	Tenda AX1806	Hig	0.49	7.5	0.01	May 6, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28971	Tenda AX1806	Hig	0.49	7.5	0.01	May 6, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28970	Tenda AX1806	Hig	0.49	7.5	0.01	May 6, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28969	Tenda AX1806	Hig	0.49	7.5	0.01	May 6, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28556	Tenda AC15	Hig	0.49	7.5	0.01	May 4, 2022	Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in…
CVE-2022-26243	Tenda AC10-1200	Hig	0.49	7.5	0.01	Mar 23, 2022	Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function.
CVE-2021-38772	Tenda AC10-1200	Hig	0.49	7.5	0.01	Mar 23, 2022	Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.
CVE-2022-25566	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-25561	Tenda AX12	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25560	Tenda AX12	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25558	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ProvinceCode parameter.
CVE-2022-25557	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the urls parameter.
CVE-2022-25556	Tenda AX12	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25555	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ntpServer parameter.
CVE-2022-25554	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.
CVE-2022-25553	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsPwd parameter.
CVE-2022-25552	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.
CVE-2022-25551	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsDomain parameter.
CVE-2022-25550	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceName parameter.
CVE-2022-25549	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsEn parameter.
CVE-2022-25548	Tenda AX1806	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the serverName parameter.
CVE-2022-25547	Tenda AX1806	Hig	0.49	7.5	0.09	Mar 10, 2022	Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2021-46408	Tenda AX12	Hig	0.49	7.5	0.01	Mar 10, 2022	Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of Service (DoS) via the strcpy parameter.
CVE-2021-45391	Tenda AX12	Hig	0.49	7.5	0.02	Feb 16, 2022	A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/setIPv6Status binary file /usr/sbin/httpd via the conType parameter, which causes a Denial of Service.
CVE-2022-24172	Tenda G1 and G3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the addDhcpRules parameter.
CVE-2022-24169	Tenda G1 and G3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRule parameter.
CVE-2022-24166	Tenda G3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.
CVE-2022-24164	Tenda G3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter.
CVE-2022-24163	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
CVE-2022-24162	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-24161	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter.
CVE-2022-24160	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.
CVE-2022-24159	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp parameters.
CVE-2022-24158	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-24157	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceList parameter.
CVE-2022-24156	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-24155	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the schedStartTime and schedEndTime parameters.
CVE-2022-24154	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the rebootTime parameter.
CVE-2022-24153	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.
CVE-2022-24152	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-24151	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the shareSpeed parameter.
CVE-2022-24149	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wpapsk_crypto parameter.
CVE-2022-24147	Tenda AX3	Hig	0.49	7.5	0.01	Feb 4, 2022	Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters.

CVE-2022-32030HigJul 1, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.
CVE-2022-30475HigMay 26, 2022
Tenda
AC Series Router AC18
risk 0.49cvss 7.5epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.
CVE-2022-30473HigMay 26, 2022
Tenda
AC Series Router
risk 0.49cvss 7.5epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
CVE-2022-30033HigMay 18, 2022
Tenda
Tx9 Pro Firmware
risk 0.49cvss 7.5epss 0.01
Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
CVE-2022-28917HigMay 18, 2022
Tenda
AX12
risk 0.49cvss 7.5epss 0.10
Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.
CVE-2022-30040HigMay 11, 2022
Tenda
AX1803
risk 0.49cvss 7.5epss 0.02
Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer…
CVE-2022-28973HigMay 6, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28972HigMay 6, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28971HigMay 6, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28970HigMay 6, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28969HigMay 6, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2022-28556HigMay 4, 2022
Tenda
AC15
risk 0.49cvss 7.5epss 0.01
Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in…
CVE-2022-26243HigMar 23, 2022
Tenda
AC10-1200
risk 0.49cvss 7.5epss 0.01
Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function.
CVE-2021-38772HigMar 23, 2022
Tenda
AC10-1200
risk 0.49cvss 7.5epss 0.01
Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.
CVE-2022-25566HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-25561HigMar 10, 2022
Tenda
AX12
risk 0.49cvss 7.5epss 0.01
Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25560HigMar 10, 2022
Tenda
AX12
risk 0.49cvss 7.5epss 0.01
Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25558HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ProvinceCode parameter.
CVE-2022-25557HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the urls parameter.
CVE-2022-25556HigMar 10, 2022
Tenda
AX12
risk 0.49cvss 7.5epss 0.01
Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25555HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ntpServer parameter.
CVE-2022-25554HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.
CVE-2022-25553HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsPwd parameter.
CVE-2022-25552HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.
CVE-2022-25551HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsDomain parameter.
CVE-2022-25550HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceName parameter.
CVE-2022-25549HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsEn parameter.
CVE-2022-25548HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the serverName parameter.
CVE-2022-25547HigMar 10, 2022
Tenda
AX1806
risk 0.49cvss 7.5epss 0.09
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2021-46408HigMar 10, 2022
Tenda
AX12
risk 0.49cvss 7.5epss 0.01
Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of Service (DoS) via the strcpy parameter.
CVE-2021-45391HigFeb 16, 2022
Tenda
AX12
risk 0.49cvss 7.5epss 0.02
A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/setIPv6Status binary file /usr/sbin/httpd via the conType parameter, which causes a Denial of Service.
CVE-2022-24172HigFeb 4, 2022
Tenda
G1 and G3
risk 0.49cvss 7.5epss 0.01
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the addDhcpRules parameter.
CVE-2022-24169HigFeb 4, 2022
Tenda
G1 and G3
risk 0.49cvss 7.5epss 0.01
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IPMacBindRule parameter.
CVE-2022-24166HigFeb 4, 2022
Tenda
G3
risk 0.49cvss 7.5epss 0.01
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.
CVE-2022-24164HigFeb 4, 2022
Tenda
G3
risk 0.49cvss 7.5epss 0.01
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsHijackRule parameter.
CVE-2022-24163HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
CVE-2022-24162HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-24161HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter.
CVE-2022-24160HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.
CVE-2022-24159HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp parameters.
CVE-2022-24158HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-24157HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceList parameter.
CVE-2022-24156HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-24155HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the schedStartTime and schedEndTime parameters.
CVE-2022-24154HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the rebootTime parameter.
CVE-2022-24153HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.
CVE-2022-24152HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-24151HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the shareSpeed parameter.
CVE-2022-24149HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wpapsk_crypto parameter.
CVE-2022-24147HigFeb 4, 2022
Tenda
AX3
risk 0.49cvss 7.5epss 0.01
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters.

Page 35 of 43