Ac9 Firmware Security Vulnerabilities and Issues — Ac9 Firmware CVE List

cve

CVE-2017-16923

Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.0...

8.8CVSS

9.1AI Score

0.001EPSS

2022-10-03 04:23 PM

26

cve

CVE-2017-16936

Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15...

6.5CVSS

6.5AI Score

0.002EPSS

2017-11-24 07:29 AM

24

cve

CVE-2018-14492

Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.

7.5CVSS

7.6AI Score

0.001EPSS

2022-10-03 04:22 PM

21

cve

CVE-2018-14557

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When proces...

7.5CVSS

7.7AI Score

0.001EPSS

2019-04-25 08:29 PM

24

cve

CVE-2018-14558

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands vi...

9.8CVSS

9.7AI Score

0.936EPSS

2018-10-30 06:29 PM

841

In Wild

cve

CVE-2018-14559

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When proces...

7.5CVSS

7.7AI Score

0.001EPSS

2019-04-25 08:29 PM

21

cve

CVE-2018-16333

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value...

7.5CVSS

7.7AI Score

0.001EPSS

2018-09-02 03:29 AM

24

cve

CVE-2018-16334

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.

8.8CVSS

8.9AI Score

0.003EPSS

2018-09-02 03:29 AM

23

cve

CVE-2018-18706

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromD...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

22

cve

CVE-2018-18707

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, th...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

20

cve

CVE-2018-18708

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromA...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

17

2

cve

CVE-2018-18709

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post reque...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

24

cve

CVE-2018-18727

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post r...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

21

cve

CVE-2018-18728

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request.

9.8CVSS

9.6AI Score

0.014EPSS

2018-10-29 12:29 PM

32

cve

CVE-2018-18729

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a po...

9.8CVSS

9.4AI Score

0.005EPSS

2018-10-29 12:29 PM

26

cve

CVE-2018-18730

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters fo...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

21

cve

CVE-2018-18731

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceMac' parameter for a post re...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

24

cve

CVE-2018-18732

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'ntpServer' parameter for a post re...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

20

cve

CVE-2018-7561

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of service or possibly have unspecified other impact.

9.8CVSS

9.7AI Score

0.008EPSS

2018-03-01 03:29 PM

20

cve

CVE-2020-13389

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318 )_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing t...

9.8CVSS

9.6AI Score

0.007EPSS

2020-05-22 05:15 PM

67

cve

CVE-2020-13390

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318 )_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing t...

9.8CVSS

9.6AI Score

0.01EPSS

2020-05-22 05:15 PM

77

cve

CVE-2020-13391

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318 )_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing t...

9.8CVSS

9.6AI Score

0.01EPSS

2020-05-22 05:15 PM

66

cve

CVE-2020-13392

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318 )_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing t...

9.8CVSS

9.6AI Score

0.01EPSS

2020-05-22 05:15 PM

73

cve

CVE-2020-13393

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318 )_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing t...

9.8CVSS

9.6AI Score

0.01EPSS

2020-05-22 05:15 PM

74

cve

CVE-2020-13394

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318 )_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing t...

9.8CVSS

9.5AI Score

0.01EPSS

2020-05-22 05:15 PM

63

cve

CVE-2020-20746

A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg.

7.2CVSS

7.6AI Score

0.004EPSS

2021-09-30 09:15 PM

25

cve

CVE-2020-22079

Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.

9.8CVSS

9.9AI Score

0.021EPSS

2021-10-29 11:15 AM

32

cve

CVE-2020-26728

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code execution via shell metacharacters in the guestuser field to the __fastcall function with a POST request.

9.8CVSS

9.7AI Score

0.027EPSS

2022-02-11 07:15 PM

56

cve

CVE-2021-31624

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter.

8.8CVSS

8.9AI Score

0.001EPSS

2021-10-29 11:15 AM

23

cve

CVE-2021-31627

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.

8.8CVSS

8.9AI Score

0.001EPSS

2021-10-29 11:15 AM

24

cve

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs.

6.5CVSS

6.8AI Score

0.001EPSS

2022-05-24 12:15 PM

48

4

cve

CVE-2022-25414

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.

9.8CVSS

9.6AI Score

0.002EPSS

2022-02-24 03:15 PM

67

cve

CVE-2022-25417

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo.

9.8CVSS

9.6AI Score

0.002EPSS

2022-02-24 03:15 PM

59

cve

CVE-2022-25418

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.

9.8CVSS

9.6AI Score

0.002EPSS

2022-02-24 03:15 PM

62

cve

CVE-2022-25427

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

61

cve

CVE-2022-25428

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

61

cve

CVE-2022-25429

Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function.

9.8CVSS

9.7AI Score

0.002EPSS

2022-03-18 09:15 PM

63

cve

CVE-2022-25431

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.

9.8CVSS

9.4AI Score

0.002EPSS

2022-03-18 09:15 PM

59

cve

CVE-2022-25433

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

67

cve

CVE-2022-25434

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

66

cve

CVE-2022-25435

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

57

cve

CVE-2022-25437

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

55

cve

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function.

9.8CVSS

9.6AI Score

0.005EPSS

2022-03-18 09:15 PM

64

cve

CVE-2022-25439

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

61

cve

CVE-2022-25440

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-18 09:15 PM

87

cve

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function.

9.8CVSS

9.6AI Score

0.005EPSS

2022-03-18 09:15 PM

60

cve

CVE-2022-26278

Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-28 09:15 PM

61

cve

CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.

9.8CVSS

9.5AI Score

0.002EPSS

2022-04-07 03:15 PM

62

cve

CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root shell through a constructed payload.

9.8CVSS

9.5AI Score

0.002EPSS

2022-04-07 04:15 PM

49

cve

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload

9.8CVSS

9.5AI Score

0.002EPSS

2022-05-03 04:15 PM

47