Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

19 records in W9 Firmware · all components

TI-2023-27936 CVE-2023-51101 · GHSA-7g76-j485-5vjx

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.

HIGH 82

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2023-12-26 No fix listed CWE-787

TI-2023-27932 CVE-2023-51097 · GHSA-mv3f-c7xw-x6f3

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.

HIGH 82

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00818 Published 2023-12-26 No fix listed CWE-787

TI-2024-00500 CVE-2024-0541 · GHSA-cmp3-jfp5-m6fq

Tenda W9 httpd formAddSysLogRule stack-based overflow

HIGH 76

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-03948 CVE-2024-4243 · GHSA-5cp4-5pxh-47cm

Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-03945 CVE-2024-4240 · GHSA-cwvf-gq9g-7g6c

Tenda W9 formQosManageDouble_user stack-based overflow

HIGH 73

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01451 Published 2024-04-26 No fix listed CWE-121

TI-2024-03946 CVE-2024-4241 · GHSA-rx97-mvj7-rx8w

Tenda W9 formQosManageDouble_auto stack-based overflow

HIGH 71

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-00497 CVE-2024-0538 · GHSA-39qp-7mxh-5jrr

Tenda W9 httpd formQosManage_auto stack-based overflow

MEDIUM 52

A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01399 Published 2024-01-15 No fix listed CWE-121

TI-2024-00495 CVE-2024-0536 · GHSA-qp9j-573m-xrwq

Tenda W9 httpd setWrlAccessList stack-based overflow

MEDIUM 46

A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01399 Published 2024-01-15 No fix listed CWE-121

TI-2023-27935 CVE-2023-51100 · GHSA-6vj3-2vp9-8337

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability…

MEDIUM 46

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01842 Published 2023-12-26 No fix listed CWE-78

TI-2023-27934 CVE-2023-51099 · GHSA-3j9j-xcvh-87c7

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .

MEDIUM 46

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01896 Published 2023-12-26 No fix listed CWE-78

TI-2023-27933 CVE-2023-51098 · GHSA-x6f2-cjqr-r5qr

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability…

MEDIUM 46

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01842 Published 2023-12-26 No fix listed CWE-78

TI-2024-00501 CVE-2024-0542 · GHSA-wgcv-697r-4jj4

Tenda W9 httpd formWifiMacFilterGet stack-based overflow

MEDIUM 45

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-00498 CVE-2024-0539 · GHSA-wgmf-6r9c-2hxx

Tenda W9 httpd formQosManage_user stack-based overflow

MEDIUM 45

A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-00496 CVE-2024-0537 · GHSA-hxc3-wp75-7643

Tenda W9 httpd setWrlBasicInfo stack-based overflow

MEDIUM 45

A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-03949 CVE-2024-4244 · GHSA-q4xw-qv7c-q8pp

Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow

MEDIUM 43

A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-03947 CVE-2024-4242 · GHSA-7rww-65p2-qxxm

Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-00499 CVE-2024-0540 · GHSA-cqrr-xcm3-hjp6

Tenda W9 httpd formOfflineSet stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00793 Published 2024-01-15 No fix listed CWE-121

TI-2023-27937 CVE-2023-51102 · GHSA-vhvx-r37h-3wm9

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.

MEDIUM 43

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2023-12-26 No fix listed CWE-787

TI-2024-35303 CVE-2024-52788 · GHSA-6gpv-2g95-83h9

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in…

LOW 37

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00407 Published 2024-11-19 No fix listed CWE-798

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0