Vendor CVEs

Tenda

All CVEs

2,140 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-49409	Tenda AX3	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49408	Tenda AX3	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
CVE-2023-49406	Tenda W30E	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49405	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.
CVE-2023-49404	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.
CVE-2023-50002	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode.
CVE-2023-50001	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline.
CVE-2023-50000	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode.
CVE-2023-49999	Tenda W30E	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition.
CVE-2023-49410	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
CVE-2023-49403	Tenda W30E	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.
CVE-2023-49402	Tenda W30E	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.
CVE-2023-49436	Tenda AX9	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49435	Tenda AX9	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVE-2023-49434	Tenda AX9	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49433	Tenda AX9	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVE-2023-49432	Tenda AX9	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
CVE-2023-49431	Tenda AX9	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49430	Tenda AX9	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-49429	Tenda AX9	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.
CVE-2023-49437	Tenda AX12	Cri	0.64	9.8	0.02	Dec 7, 2023	Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49428	Tenda AX12	Cri	0.64	9.8	0.03	Dec 7, 2023	Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49426	Tenda AX12	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2023-49425	Tenda AX12	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49424	Tenda AX12	Cri	0.64	9.8	0.01	Dec 7, 2023	Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-45484	Tenda Ac10	Cri	0.64	9.8	0.01	Nov 29, 2023	Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
CVE-2023-45483	Tenda Ac10	Cri	0.64	9.8	0.01	Nov 29, 2023	Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time.
CVE-2023-45482	Tenda Ac10	Cri	0.64	9.8	0.01	Nov 29, 2023	Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
CVE-2023-45481	Tenda Ac10	Cri	0.64	9.8	0.01	Nov 29, 2023	Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
CVE-2023-45480	Tenda Ac10	Cri	0.64	9.8	0.01	Nov 29, 2023	Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878.
CVE-2023-45479	Tenda Ac10	Cri	0.64	9.8	0.01	Nov 29, 2023	Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098.
CVE-2023-49044	Tenda AX1803	Cri	0.64	9.8	0.01	Nov 27, 2023	Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
CVE-2023-49042	Tenda AX1803	Cri	0.64	9.8	0.01	Nov 27, 2023	Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.
CVE-2023-49040	Tenda AX1803	Cri	0.64	9.8	0.02	Nov 27, 2023	An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
CVE-2023-49046	Tenda AX1803	Cri	0.64	9.8	0.01	Nov 27, 2023	Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.
CVE-2023-38823	Tenda AC6	Cri	0.64	9.8	0.01	Nov 20, 2023	Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVE-2023-46369	Tenda W18E	Cri	0.64	9.8	0.01	Oct 25, 2023	Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function.
CVE-2023-40830	Tenda AC6	Cri	0.64	9.8	0.01	Oct 3, 2023	Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
CVE-2023-44023	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-44022	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-44021	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVE-2023-44020	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVE-2023-44019	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.
CVE-2023-44017	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVE-2023-44016	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVE-2023-44015	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.
CVE-2023-44014	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters.
CVE-2023-44013	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function.
CVE-2023-42320	Tenda AC10V4.0	Cri	0.64	9.8	0.01	Sep 18, 2023	Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function.
CVE-2023-40942	Tenda AC9	Cri	0.64	9.8	0.01	Sep 7, 2023	Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.

CVE-2023-49409CriDec 7, 2023
Tenda
AX3
risk 0.64cvss 9.8epss 0.02
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49408CriDec 7, 2023
Tenda
AX3
risk 0.64cvss 9.8epss 0.01
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
CVE-2023-49406CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.02
Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49405CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.
CVE-2023-49404CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.
CVE-2023-50002CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode.
CVE-2023-50001CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline.
CVE-2023-50000CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode.
CVE-2023-49999CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.02
Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition.
CVE-2023-49410CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
CVE-2023-49403CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.02
Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.
CVE-2023-49402CriDec 7, 2023
Tenda
W30E
risk 0.64cvss 9.8epss 0.01
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.
CVE-2023-49436CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.02
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49435CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.02
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVE-2023-49434CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.01
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49433CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.01
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVE-2023-49432CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.01
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
CVE-2023-49431CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.02
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49430CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.01
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-49429CriDec 7, 2023
Tenda
AX9
risk 0.64cvss 9.8epss 0.02
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.
CVE-2023-49437CriDec 7, 2023
Tenda
AX12
risk 0.64cvss 9.8epss 0.02
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49428CriDec 7, 2023
Tenda
AX12
risk 0.64cvss 9.8epss 0.03
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49426CriDec 7, 2023
Tenda
AX12
risk 0.64cvss 9.8epss 0.01
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2023-49425CriDec 7, 2023
Tenda
AX12
risk 0.64cvss 9.8epss 0.01
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49424CriDec 7, 2023
Tenda
AX12
risk 0.64cvss 9.8epss 0.01
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-45484CriNov 29, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
CVE-2023-45483CriNov 29, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time.
CVE-2023-45482CriNov 29, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
CVE-2023-45481CriNov 29, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
CVE-2023-45480CriNov 29, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878.
CVE-2023-45479CriNov 29, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098.
CVE-2023-49044CriNov 27, 2023
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
CVE-2023-49042CriNov 27, 2023
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.
CVE-2023-49040CriNov 27, 2023
Tenda
AX1803
risk 0.64cvss 9.8epss 0.02
An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
CVE-2023-49046CriNov 27, 2023
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.
CVE-2023-38823CriNov 20, 2023
Tenda
AC6
risk 0.64cvss 9.8epss 0.01
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVE-2023-46369CriOct 25, 2023
Tenda
W18E
risk 0.64cvss 9.8epss 0.01
Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function.
CVE-2023-40830CriOct 3, 2023
Tenda
AC6
risk 0.64cvss 9.8epss 0.01
Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
CVE-2023-44023CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-44022CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-44021CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVE-2023-44020CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVE-2023-44019CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.
CVE-2023-44017CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVE-2023-44016CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVE-2023-44015CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.
CVE-2023-44014CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters.
CVE-2023-44013CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function.
CVE-2023-42320CriSep 18, 2023
Tenda
AC10V4.0
risk 0.64cvss 9.8epss 0.01
Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function.
CVE-2023-40942CriSep 7, 2023
Tenda
AC9
risk 0.64cvss 9.8epss 0.01
Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.

Page 6 of 43