Filtered by vendor Tenda Subscriptions
Total 1196 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-45995 1 Tenda 2 Ax12, Ax12 Firmware 2025-04-10 9.8 Critical
There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn. This vulnerability can cause the web service not to restart or even execute arbitrary code. It is a different vulnerability from CVE-2022-2414.
CVE-2024-30891 1 Tenda 2 Ac18, Ac18 Firmware 2025-04-10 8.8 High
A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.
CVE-2024-33835 1 Tenda 2 Ac18, Ac18 Firmware 2025-04-10 9.8 Critical
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function.
CVE-2025-25676 1 Tenda 2 I12, I12 Firmware 2025-04-10 9.8 Critical
Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.
CVE-2025-25678 1 Tenda 2 I12, I12 Firmware 2025-04-10 9.8 Critical
Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.
CVE-2025-25679 1 Tenda 2 I12, I12 Firmware 2025-04-10 8 High
Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.
CVE-2025-25505 1 Tenda 2 Ac6, Ac6 Firmware 2025-04-10 6.5 Medium
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.
CVE-2025-25507 1 Tenda 2 Ac6, Ac6 Firmware 2025-04-10 6.5 Medium
There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.
CVE-2025-25510 1 Tenda 2 Ac8, Ac8 Firmware 2025-04-10 6.5 Medium
Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.
CVE-2025-1851 1 Tenda 2 Ac7, Ac7 Firmware 2025-04-10 8.8 High
A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-25632 1 Tenda 2 Ac15, Ac15 Firmware 2025-04-09 9.8 Critical
Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet.
CVE-2024-51116 1 Tenda 2 Ac6, Ac6 Firmware 2025-04-09 8.8 High
Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.
CVE-2024-44859 1 Tenda 2 Fh1201, Fh1201 Firmware 2025-04-09 8 High
Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.
CVE-2025-22949 1 Tenda 2 Ac9, Ac9 Firmware 2025-04-09 9.8 Critical
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.
CVE-2025-22946 1 Tenda 2 Ac9, Ac9 Firmware 2025-04-09 9.8 Critical
Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.
CVE-2024-57483 1 Tenda 2 I24, I24 Firmware 2025-04-09 9.8 Critical
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
CVE-2025-3161 1 Tenda 2 Ac10, Ac10 Firmware 2025-04-09 8.8 High
A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-32282 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-04-09 6.3 Medium
Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
CVE-2024-32302 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-04-09 6.3 Medium
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32315 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-04-09 4.7 Medium
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.