Filtered by vendor Tenda
Subscribe
Total
1328 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-24161 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter. | |||||
CVE-2022-24162 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter. | |||||
CVE-2022-24163 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter. | |||||
CVE-2022-24158 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. | |||||
CVE-2022-24159 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp parameters. | |||||
CVE-2022-24160 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter. | |||||
CVE-2022-24146 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. | |||||
CVE-2022-24154 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the rebootTime parameter. | |||||
CVE-2022-24155 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the schedStartTime and schedEndTime parameters. | |||||
CVE-2022-24147 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters. | |||||
CVE-2022-24152 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter. | |||||
CVE-2022-24153 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter. | |||||
CVE-2022-24148 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.5 HIGH | 9.8 CRITICAL |
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter. | |||||
CVE-2022-24149 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wpapsk_crypto parameter. | |||||
CVE-2022-24150 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.5 HIGH | 9.8 CRITICAL |
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter. | |||||
CVE-2022-24151 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS) via the shareSpeed parameter. | |||||
CVE-2022-24157 | 1 Tenda | 2 Ax3, Ax3 Firmware | 2022-02-07 | 7.8 HIGH | 7.5 HIGH |
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceList parameter. | |||||
CVE-2021-31758 | 1 Tenda | 2 Ac11, Ac11 Firmware | 2021-05-10 | 10.0 HIGH | 9.8 CRITICAL |
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request. | |||||
CVE-2021-31756 | 1 Tenda | 2 Ac11, Ac11 Firmware | 2021-05-10 | 10.0 HIGH | 9.8 CRITICAL |
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable. | |||||
CVE-2021-31757 | 1 Tenda | 2 Ac11, Ac11 Firmware | 2021-05-10 | 10.0 HIGH | 9.8 CRITICAL |
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request. |