Filtered by vendor Tenda Subscriptions
Total 1198 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-33217 1 Tenda 2 Fh1206, Fh1206 Firmware 2025-03-17 7.5 High
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.
CVE-2024-48826 1 Tenda 2 Ac7, Ac7 Firmware 2025-03-17 8 High
Tenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.
CVE-2024-48825 1 Tenda 2 Ac7, Ac7 Firmware 2025-03-17 8 High
Tenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.
CVE-2024-32301 1 Tenda 2 Ac7, Ac7 Firmware 2025-03-17 9.8 Critical
Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32281 1 Tenda 2 Ac7, Ac7 Firmware 2025-03-17 8.8 High
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
CVE-2024-35580 1 Tenda 2 Ax1806, Ax1806 Firmware 2025-03-17 9.8 Critical
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
CVE-2024-35579 1 Tenda 2 Ax1806, Ax1806 Firmware 2025-03-17 7.7 High
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.
CVE-2024-35578 1 Tenda 2 Ax1806, Ax1806 Firmware 2025-03-17 8 High
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.
CVE-2024-35576 1 Tenda 2 Ax1806, Ax1806 Firmware 2025-03-17 5.2 Medium
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.
CVE-2024-35571 1 Tenda 2 Ax1806, Ax1806 Firmware 2025-03-17 9.8 Critical
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
CVE-2025-25675 1 Tenda 2 Ac10, Ac10 Firmware 2025-03-17 9.8 Critical
Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution.
CVE-2025-25674 1 Tenda 2 Ac10, Ac10 Firmware 2025-03-17 9.8 Critical
Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.
CVE-2024-32317 1 Tenda 2 Ac10, Ac10 Firmware 2025-03-17 7.5 High
Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
CVE-2024-32306 1 Tenda 2 Ac10u, Ac10u Firmware 2025-03-17 5.7 Medium
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
CVE-2024-30612 1 Tenda 2 Ac10u, Ac10u Firmware 2025-03-17 8.1 High
Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.
CVE-2024-25373 1 Tenda 2 Ac10, Ac10 Firmware 2025-03-17 4.6 Medium
Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function.
CVE-2020-10987 1 Tenda 2 Ac15, Ac15 Firmware 2025-03-14 9.8 Critical
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.
CVE-2024-50854 2 Tenda, Tendacn 3 G3, G3, G3 Firmware 2025-03-14 8.8 High
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.
CVE-2024-30628 1 Tenda 2 Fh1205, Fh1205 Firmware 2025-03-14 9.8 Critical
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.
CVE-2024-30632 1 Tenda 2 Fh1205, Fh1205 Firmware 2025-03-13 6.5 Medium
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function.