Priority MEDIUM 62
Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_43fdcc function at /goform/SetNetControlList.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0084 · Published 2025-03-20 · No fix listed CWE-121
Priority HIGH 72
Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/setMacFilterCfg.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00566 · Published 2025-03-20 · No fix listed CWE-121
Priority HIGH 70
AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the…
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01522 · Published 2024-07-19 · No fix listed CWE-77
Priority MEDIUM 62
An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00402 · Published 2024-07-16 · No fix listed CWE-940
Priority MEDIUM 63
Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.
CVSS 3.1MEDIUM 6.8· Adjacent network · Low privileges · No interaction · EPSS 0.00344 · Published 2024-07-10 · No fix listed CWE-121
Priority MEDIUM 50
Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub_431CF0 function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00818 · Published 2024-03-14 · No fix listed CWE-121
Priority MEDIUM 41
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00491 · Published 2024-02-20 · No fix listed CWE-284
Priority LOW 34
Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00623 · Published 2024-01-10 · No fix listed CWE-787
Priority HIGH 82
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02411 · Published 2023-12-07 · No fix listed CWE-77
Priority HIGH 76
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02499 · Published 2023-12-07 · No fix listed CWE-77
Priority MEDIUM 44
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00925 · Published 2023-12-07 · No fix listed CWE-787
Priority MEDIUM 44
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00925 · Published 2023-12-07 · No fix listed CWE-787
Priority HIGH 76
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00924 · Published 2023-12-07 · No fix listed CWE-121
Priority MEDIUM 51
There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01157 · Published 2023-01-05 · No fix listed CWE-120
Priority MEDIUM 50
Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet .
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.07454 · Published 2022-12-12 · No fix listed CWE-352
Priority MEDIUM 40
Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set .
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00854 · Published 2022-12-12 · No fix listed CWE-787
Priority HIGH 73
Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02108 · Published 2022-12-12 · No fix listed CWE-78
Priority HIGH 73
Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02169 · Published 2022-12-12 · No fix listed CWE-78
Priority LOW 25
Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00308 · Published 2022-08-25 · No fix listed CWE-787
Priority MEDIUM 45
Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.09551 · Published 2022-05-18 · No fix listed CWE-787
Priority MEDIUM 54
Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08894 · Published 2022-05-04 · No fix listed CWE-787
Priority MEDIUM 54
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1014 · Published 2022-05-03 · No fix listed CWE-787
Priority LOW 29
Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00455 · Published 2022-04-25 · No fix listed CWE-352
Priority LOW 29
Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at /goform/WifiExtraSet.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00457 · Published 2022-04-25 · No fix listed CWE-352
Priority LOW 35
Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01238 · Published 2022-03-09 · No fix listed CWE-787
Load more
THREATIST.IORead the docs