Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,049

Export CSV
CVE-2023-50001

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-50000

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-4744

Tenda AC8 formSetDeviceName stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Tenda
Products
Ac8 Ac8 Firmware
CVE-2023-49436

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49434

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49433

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49431

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49426

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49425

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49424

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49411

Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49410

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49409

Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Tenda
Products
Ax3 Ax3 Firmware
CVE-2023-49408

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax3 Ax3 Firmware
CVE-2023-49406

Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49405

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware