tenda ac15_firmware CVEs

CVE-2023-30378

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30376

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30375

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30373

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30372

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30371

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30370

Published Apr 24, 2023

In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2023-30369

Published Apr 24, 2023

Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-44156

Published Nov 21, 2022

Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-44169

Published Nov 21, 2022

Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-44168

Published Nov 21, 2022

Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-44167

Published Nov 21, 2022

Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-43259

Published Oct 18, 2022

Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-40851

Published Sep 23, 2022

Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-37175

Published Aug 19, 2022

Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-28557

Published May 4, 2022

There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-28556

Published May 4, 2022

Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web.…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-44971

Published Jan 28, 2022

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain se…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-15916

Published Jul 23, 2020

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parame…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-10989

Published Jul 13, 2020

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-10988

Published Jul 13, 2020

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-10987

Published Jul 13, 2020

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

CVSS 9.8 · Critical

evidence mentions: 8
Buzz score: 58.5

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2020-10986

Published Jul 13, 2020

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-18732

Published Oct 29, 2018

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buf…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-18731

Published Oct 29, 2018

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buf…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

tenda / ac15_firmware CVEs