Lucene search

K
TendaAc5 Firmware15.03.06.47

6 matches found

CVE
CVE
added 2021/01/26 6:16 p.m.66 views

CVE-2021-3186

A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter.

5.4CVSS6AI score0.00255EPSS
CVE
CVE
added 2025/06/09 6:15 a.m.47 views

CVE-2025-5863

A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

9.8CVSS8.9AI score0.00138EPSS
CVE
CVE
added 2025/06/06 7:15 p.m.42 views

CVE-2025-5795

A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47. This affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has be...

9CVSS8.9AI score0.00096EPSS
CVE
CVE
added 2025/06/06 7:15 p.m.39 views

CVE-2025-5794

A vulnerability, which was classified as critical, has been found in Tenda AC5 15.03.06.47. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be launched remotely. The exploi...

9CVSS8.8AI score0.00096EPSS
CVE
CVE
added 2025/06/30 5:15 a.m.8 views

CVE-2025-6886

A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be laun...

9CVSS8.9AI score0.00084EPSS
CVE
CVE
added 2025/06/30 5:15 a.m.6 views

CVE-2025-6887

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The exploi...

9CVSS8.8AI score0.00084EPSS