VYPR
← Tenda

Vendor CVEs

Tenda

All CVEs

2,166 total · sorted by risk
  • CVE-2023-40892CriAug 24, 2023
    Tenda
    AC8
    risk 0.64cvss 9.8epss 0.01

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.

  • CVE-2023-40891CriAug 24, 2023
    Tenda
    AC8
    risk 0.64cvss 9.8epss 0.01

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.

  • CVE-2023-39673CriAug 18, 2023
    Tenda
    AC15
    risk 0.64cvss 9.8epss 0.01

    Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().

  • CVE-2023-39672CriAug 18, 2023
    Tenda
    WH450
    risk 0.64cvss 9.8epss 0.01

    Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.

  • CVE-2023-39670CriAug 18, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.

  • CVE-2023-38940CriAug 7, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

  • CVE-2023-38939CriAug 7, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function.

  • CVE-2023-38938CriAug 7, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.

  • CVE-2023-38937CriAug 7, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the…

  • CVE-2023-38936CriAug 7, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the…

  • CVE-2023-38935CriAug 7, 2023
    Tenda
    AC5
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.

  • CVE-2023-38934CriAug 7, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.

  • CVE-2023-38933CriAug 7, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

  • CVE-2023-38932CriAug 7, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.

  • CVE-2023-38931CriAug 7, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the…

  • CVE-2023-38930CriAug 7, 2023
    Tenda
    AC9
    risk 0.64cvss 9.8epss 0.01

    Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.

  • CVE-2023-38929CriAug 7, 2023
    Tenda
    4G300
    risk 0.64cvss 9.8epss 0.01

    Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer.

  • CVE-2023-37723CriJul 14, 2023
    Tenda
    F1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.

  • CVE-2023-37722CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.

  • CVE-2023-37721CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.

  • CVE-2023-37719CriJul 14, 2023
    Tenda
    F1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.

  • CVE-2023-37718CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.

  • CVE-2023-37717CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

  • CVE-2023-37716CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.

  • CVE-2023-37715CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm.

  • CVE-2023-37714CriJul 14, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.

  • CVE-2023-37712CriJul 10, 2023
    Tenda
    FH1202
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function.

  • CVE-2023-37711CriJul 10, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.

  • CVE-2023-37710CriJul 10, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.

  • CVE-2023-37707CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function.

  • CVE-2023-37706CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the fromAddressNat function.

  • CVE-2023-37705CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function.

  • CVE-2023-37704CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

  • CVE-2023-37703CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.

  • CVE-2023-37702CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.

  • CVE-2023-37701CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.

  • CVE-2023-37700CriJul 10, 2023
    Tenda
    FH1203
    risk 0.64cvss 9.8epss 0.01

    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

  • CVE-2023-37144CriJul 7, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.02

    Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.

  • CVE-2023-34566CriJun 8, 2023
    Tenda
    Ac10
    risk 0.64cvss 9.8epss 0.01

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo.

  • CVE-2023-33675CriJun 2, 2023
    Tenda
    AC8
    risk 0.64cvss 9.8epss 0.01

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function.

  • CVE-2023-33673CriJun 2, 2023
    Tenda
    AC8V4
    risk 0.64cvss 9.8epss 0.01

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

  • CVE-2023-33671CriJun 2, 2023
    Tenda
    AC8V4
    risk 0.64cvss 9.8epss 0.01

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.

  • CVE-2023-33670CriJun 2, 2023
    Tenda
    AC8V4
    risk 0.64cvss 9.8epss 0.01

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.

  • CVE-2023-33669CriJun 2, 2023
    Tenda
    AC8
    risk 0.64cvss 9.8epss 0.02

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.

  • CVE-2023-31587CriMay 16, 2023
    Tenda
    AC5
    risk 0.64cvss 9.8epss 0.02

    Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.

  • CVE-2023-30354CriMay 10, 2023
    Tenda Technology
    IP Camera CP3
    risk 0.64cvss 9.8epss 0.00

    Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

  • CVE-2023-30353CriMay 10, 2023
    Tenda
    IP Camera CP3
    risk 0.64cvss 9.8epss 0.01

    Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.

  • CVE-2023-30352CriMay 10, 2023
    Tenda Technology
    IP Camera CP3
    risk 0.64cvss 9.8epss 0.01

    Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.

  • CVE-2023-30135CriMay 5, 2023
    Tenda
    AC18
    risk 0.64cvss 9.8epss 0.02

    Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function.

  • CVE-2023-30378CriApr 24, 2023
    Tenda
    AC15
    risk 0.64cvss 9.8epss 0.01

    In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability.

Page 8 of 44