Tenda AC Router RCE (CVE-2020-10987)

The firmware version of the Tenda AC Router is an AC15 AC1900 device with a firmware version of 15.03.05.19 or below. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this, via the deviceName POST parameter, to execute arbitrary...

Tenda AC Router Stack Buffer Overflow (CVE-2021-31755)

The firmware version of the Tenda AC Router is an AC11 device with firmware 02.03.01.104CN or below. It is, therefore, affected by a stack buffer overflow vulnerability. An unauthenticated, remote attacker can exploit this, via a crafted POST request, to execute arbitrary code on the system. Note...

CVE-2023-38935

CVE-2023-38935 affects multiple Tenda models (AC1206, AC8, AC5, AC10, AC9) with versions listed in the initial entry. A stack overflow via the list parameter in the formSetQosBand function is reported across sources; the CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privile...