ef4tless/vuln

Releases0

Stars4

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-49427 ↗	Jan 10, 2024Wednesday, 10 January 2024, 09:15	7.5 HIGH	—
Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList function.
CVE-2023-50991 ↗	Jan 5, 2024Friday, 5 January 2024, 10:15	7.5 HIGH	—
Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function.
CVE-2023-50989 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
CVE-2023-50993 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Ruijie WS6008 v1.x v2.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 and WS6108 v1.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 was discovered to contain a command injection vulnerability via the function downFiles.
CVE-2023-50992 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.
CVE-2023-50990 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
CVE-2023-50988 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
CVE-2023-50987 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.
CVE-2023-50983 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function.
CVE-2023-50986 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.
CVE-2023-50985 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.
CVE-2023-50984 ↗	Dec 20, 2023Wednesday, 20 December 2023, 22:15	9.8 CRITICAL	—
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function.
CVE-2023-49004 ↗	Dec 19, 2023Tuesday, 19 December 2023, 22:15	9.8 CRITICAL	—
An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.
CVE-2023-49429 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.
CVE-2023-49436 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49435 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVE-2023-49434 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49433 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVE-2023-49432 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
CVE-2023-49431 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49430 ↗	Dec 7, 2023Thursday, 7 December 2023, 16:15	9.8 CRITICAL	—
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-49437 ↗	Dec 7, 2023Thursday, 7 December 2023, 15:15	9.8 CRITICAL	—
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-49428 ↗	Dec 7, 2023Thursday, 7 December 2023, 15:15	9.8 CRITICAL	—
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49426 ↗	Dec 7, 2023Thursday, 7 December 2023, 15:15	9.8 CRITICAL	—
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2023-49425 ↗	Dec 7, 2023Thursday, 7 December 2023, 15:15	9.8 CRITICAL	—
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49424 ↗	Dec 7, 2023Thursday, 7 December 2023, 14:15	9.8 CRITICAL	—
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.