20982 matches found
CVE-2024-41630
Stack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10EN allows a remote attacker to execute arbitrary code via the ssid parameter at ip/goform/fastsettingwifiset...
CVE-2024-41465
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...
CVE-2024-41492
A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2023-4744
A vulnerability was found in Tenda AC8 16.03.34.06cnTDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public a...
Tenda N300 安全漏洞
The Tenda N300 is a router from China-based Tenda. A security vulnerability exists in the Tenda N300 that stems from the lack of the HTTPOnly flag in the session cookie associated with the web-based management interface, which could allow a remote attacker to gain unauthorized access by capturing...
PT-2026-2149
Name of the Vulnerable Software and Affected Versions Tenda 300Mbps Wireless Router F3 Tenda N300 Easy Setup Router Description The routers are susceptible to a security issue stemming from the absence of the HTTPOnly flag on session cookies used with the web-based administrative interface. An...
PT-2026-2148
Name of the Vulnerable Software and Affected Versions Tenda 300Mbps Wireless Router F3 Tenda N300 Easy Setup Router Description The routers transmit credentials using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network can intercept network...
Tenda N300 授权问题漏洞
The Tenda N300 is a router from China-based Tenda. The Tenda N300 suffers from an authorization issue vulnerability that stems from the use of login credentials as a session ID, which could allow a remote attacker to hijack an authenticated session by intercepting network traffic and capturing th...
PT-2026-2147
Name of the Vulnerable Software and Affected Versions Tenda 300Mbps Wireless Router F3 Tenda N300 Easy Setup Router Description The routers transmit login credentials in plaintext during the initial login or after a factory reset through the web-based administrative interface. An attacker on the...
Tenda N300和Tenda F3 安全漏洞
Tenda N300 and Tenda F3 are both products of Tenda, a China-based company.Tenda N300 is a router.Tenda F3 is a wireless router.Tenda N300 and Tenda F3 are both products of Tenda, a China-based company.Tenda N300 is a router.Tenda F3 is a wireless router. A security vulnerability exists in the Ten...
Tenda N300和Tenda F3 安全漏洞
Tenda N300 and Tenda F3 are both products of Tenda, a Chinese company.Tenda N300 is a router.Tenda F3 is a wireless router. A security vulnerability exists in the Tenda N300 and Tenda F3 that originates from the transmission of credentials encoded using reversible Base64 encoding via a web-based...
CVE-2026-0640
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...
CVE-2022-27077
Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...
CVE-2022-27374
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...
CVE-2022-27082
Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo...
CVE-2022-27375
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
CVE-2022-27078
Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail...
CVE-2022-27016
There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...