Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

9 records in Tx9 Pro Firmware · all components

TI-2024-03830 CVE-2024-4114 · GHSA-5ccm-hxhv-w693

Tenda TX9 PowerSaveSet sub_42C014 stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01349 Published 2024-04-24 No fix listed CWE-121

TI-2024-03829 CVE-2024-4113 · GHSA-f755-p72c-mhgq

Tenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda TX9 22.03.02.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01453 Published 2024-04-24 No fix listed CWE-121

TI-2022-22310 CVE-2022-45337 · GHSA-xhx8-9r5h-vm7p

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.

HIGH 72

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-11-30 No fix listed CWE-787

TI-2024-03828 CVE-2024-4112 · GHSA-hq97-78w2-f272

Tenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflow

HIGH 71

A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01702 Published 2024-04-24 No fix listed CWE-121

TI-2022-12028 CVE-2022-29592 · GHSA-7fmw-f49w-wv7m

Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).

MEDIUM 61

Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20096 Published 2022-05-05 No fix listed CWE-78

TI-2022-12027 CVE-2022-29591 · GHSA-3wcj-f5mq-gxw2

Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.

MEDIUM 45

Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01416 Published 2022-05-10 No fix listed CWE-120

TI-2024-03827 CVE-2024-4111 · GHSA-mhrv-ffq7-3g67

Tenda TX9 SetLEDCfg sub_42BD7C stack-based overflow

MEDIUM 41

A vulnerability was found in Tenda TX9 22.03.02.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01453 Published 2024-04-24 No fix listed CWE-121

TI-2022-12355 CVE-2022-30033 · GHSA-fm3r-82fg-wrw5

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.

LOW 35

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01175 Published 2022-05-18 No fix listed CWE-120

TI-2022-18115 CVE-2022-38510 · GHSA-8mg5-92fc-9xrp

Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList.

LOW 34

Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00328 Published 2022-08-28 No fix listed CWE-120

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0