Vulnerabilities

Filters

2 selected

19 records

Sort

Vendor: Tenda Component: W9 Firmware Clear all filters

TI-2024-35303 CVE-2024-52788 · GHSA-6gpv-2g95-83h9

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in…

LOW 37

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00407 Published 2024-11-19 No fix listed CWE-798

TI-2024-03949 CVE-2024-4244 · GHSA-q4xw-qv7c-q8pp

Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow

MEDIUM 43

A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-03948 CVE-2024-4243 · GHSA-5cp4-5pxh-47cm

Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-03947 CVE-2024-4242 · GHSA-7rww-65p2-qxxm

Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-03946 CVE-2024-4241 · GHSA-rx97-mvj7-rx8w

Tenda W9 formQosManageDouble_auto stack-based overflow

HIGH 71

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01347 Published 2024-04-26 No fix listed CWE-121

TI-2024-03945 CVE-2024-4240 · GHSA-cwvf-gq9g-7g6c

Tenda W9 formQosManageDouble_user stack-based overflow

HIGH 73

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01451 Published 2024-04-26 No fix listed CWE-121

TI-2024-00501 CVE-2024-0542 · GHSA-wgcv-697r-4jj4

Tenda W9 httpd formWifiMacFilterGet stack-based overflow

MEDIUM 45

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-00500 CVE-2024-0541 · GHSA-cmp3-jfp5-m6fq

Tenda W9 httpd formAddSysLogRule stack-based overflow

HIGH 76

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-00499 CVE-2024-0540 · GHSA-cqrr-xcm3-hjp6

Tenda W9 httpd formOfflineSet stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00793 Published 2024-01-15 No fix listed CWE-121

TI-2024-00498 CVE-2024-0539 · GHSA-wgmf-6r9c-2hxx

Tenda W9 httpd formQosManage_user stack-based overflow

MEDIUM 45

A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-00497 CVE-2024-0538 · GHSA-39qp-7mxh-5jrr

Tenda W9 httpd formQosManage_auto stack-based overflow

MEDIUM 52

A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01399 Published 2024-01-15 No fix listed CWE-121

TI-2024-00496 CVE-2024-0537 · GHSA-hxc3-wp75-7643

Tenda W9 httpd setWrlBasicInfo stack-based overflow

MEDIUM 45

A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01303 Published 2024-01-15 No fix listed CWE-121

TI-2024-00495 CVE-2024-0536 · GHSA-qp9j-573m-xrwq

Tenda W9 httpd setWrlAccessList stack-based overflow

MEDIUM 46

A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01399 Published 2024-01-15 No fix listed CWE-121

TI-2023-27937 CVE-2023-51102 · GHSA-vhvx-r37h-3wm9

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.

MEDIUM 43

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2023-12-26 No fix listed CWE-787

TI-2023-27936 CVE-2023-51101 · GHSA-7g76-j485-5vjx

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.

HIGH 82

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2023-12-26 No fix listed CWE-787

TI-2023-27935 CVE-2023-51100 · GHSA-6vj3-2vp9-8337

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability…

MEDIUM 46

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01842 Published 2023-12-26 No fix listed CWE-78

TI-2023-27934 CVE-2023-51099 · GHSA-3j9j-xcvh-87c7

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .

MEDIUM 46

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01896 Published 2023-12-26 No fix listed CWE-78

TI-2023-27933 CVE-2023-51098 · GHSA-x6f2-cjqr-r5qr

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability…

MEDIUM 46

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01842 Published 2023-12-26 No fix listed CWE-78

TI-2023-27932 CVE-2023-51097 · GHSA-mv3f-c7xw-x6f3

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.

HIGH 82

Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00818 Published 2023-12-26 No fix listed CWE-787