Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

60 records in Ax1803 Firmware · all components

TI-2024-20325 CVE-2024-30620 · GHSA-gmc7-25r9-p22h

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00817 Published 2024-04-02 No fix listed CWE-120

TI-2023-28486 CVE-2023-51972 · GHSA-jx98-3pvf-2mfp

Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.

HIGH 82

Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01894 Published 2024-01-10 No fix listed CWE-77

TI-2023-28485 CVE-2023-51971 · GHSA-9qvh-pqr5-q973

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28484 CVE-2023-51970 · GHSA-5w8j-whwf-384q

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-01-10 No fix listed CWE-787

TI-2023-28482 CVE-2023-51968 · GHSA-5j7f-3j5h-cvq3

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-01-10 No fix listed CWE-787

TI-2023-28480 CVE-2023-51966 · GHSA-rfvx-fr64-vw46

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28478 CVE-2023-51964 · GHSA-hfvq-hp2j-56vw

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28475 CVE-2023-51961 · GHSA-8m3j-w2qr-v6w7

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28474 CVE-2023-51960 · GHSA-pcmh-79qx-f8gf

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28472 CVE-2023-51958 · GHSA-c5fw-h722-qjmv

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28471 CVE-2023-51957 · GHSA-43j3-m25r-2r6h

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28470 CVE-2023-51956 · GHSA-8j6g-xx29-47g5

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28468 CVE-2023-51954 · GHSA-6mjc-j4vv-2q28

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.

HIGH 82

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-26728 CVE-2023-49046 · GHSA-8r4v-g8rr-6r96

Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to…

HIGH 82

Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01407 Published 2023-11-27 No fix listed CWE-787

TI-2023-26724 CVE-2023-49040 · GHSA-44x4-c385-mp6p

An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via…

HIGH 82

An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01523 Published 2023-11-27 No fix listed CWE-77

TI-2022-19458 CVE-2022-40876 · GHSA-qwwj-2xhc-x8v6

In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions…

HIGH 82

In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0237 Published 2022-10-27 No fix listed CWE-787

TI-2023-28467 CVE-2023-51953 · GHSA-2xw5-75m8-wg8f

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

HIGH 81

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28483 CVE-2023-51969 · GHSA-gh6r-r3hf-65pm

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-01-10 No fix listed CWE-787

TI-2023-28481 CVE-2023-51967 · GHSA-5h2w-cfc8-wwh3

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-01-10 No fix listed CWE-787

TI-2023-28479 CVE-2023-51965 · GHSA-c6mr-6grr-2qx9

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28477 CVE-2023-51963 · GHSA-vm49-5cx4-m43w

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00867 Published 2024-01-10 No fix listed CWE-787

TI-2023-28476 CVE-2023-51962 · GHSA-2frf-pg6c-g93r

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-01-10 No fix listed CWE-787

TI-2023-28473 CVE-2023-51959 · GHSA-9c7r-hfh9-mm9j

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2023-28466 CVE-2023-51952 · GHSA-9c34-w295-vm27

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

HIGH 76

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-10 No fix listed CWE-787

TI-2024-20326 CVE-2024-30621 · GHSA-fhx3-jwgv-mpc2

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan.

HIGH 75

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2024-04-02 No fix listed CWE-121

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0