DrizzlingSun/Tenda

GitHub

github.com

Unavailable

This project is no longer available (or publicly accessible) from GitHub

Releases0

Stars7

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-30135 ↗	May 5, 2023Friday, 5 May 2023, 02:15	9.8 CRITICAL	—
Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function.
CVE-2023-27016 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27015 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27021 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25218 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27019 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27018 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27017 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25217 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27014 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27013 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27012 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25219 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25220 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27020 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25216 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25215 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25214 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25213 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25212 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25211 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25210 ↗	Apr 7, 2023Friday, 7 April 2023, 02:15	9.8 CRITICAL	—
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-24166 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:18	9.8 CRITICAL	—
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.
CVE-2023-24164 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:18	9.8 CRITICAL	—
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.
CVE-2023-24170 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:18	9.8 CRITICAL	—
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat.
CVE-2023-24169 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:18	9.8 CRITICAL	—
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c.
CVE-2023-24167 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:18	9.8 CRITICAL	—
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.
CVE-2023-24165 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:18	9.8 CRITICAL	—
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.