Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TendaAc6 Firmware

37 matches found

CVE
CVE•added 2023/08/30 5:15 p.m.•134 views

CVE-2023-40838

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.

9.8CVSS9.5AI score0.00153EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•125 views

CVE-2023-40837

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands.

9.8CVSS9.6AI score0.00114EPSS
CVE
CVE•added 2023/08/18 3:15 a.m.•118 views

CVE-2023-39670

Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.

9.8CVSS9.7AI score0.00121EPSS
CVE
CVE•added 2023/08/28 2:15 p.m.•111 views

CVE-2023-40846

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.

9.8CVSS9.4AI score0.00121EPSS
CVE
CVE•added 2025/01/09 11:15 a.m.•101 views

CVE-2025-0349

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The ex...

9.8CVSS9AI score0.00431EPSS
CVE
CVE•added 2024/11/02 12:15 p.m.•88 views

CVE-2024-10697

A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to command injection. The attack can be launch...

9.8CVSS7.5AI score0.65873EPSS
CVE
CVE•added 2025/02/12 7:15 p.m.•77 views

CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.

9.8CVSS7.2AI score0.00086EPSS
CVE
CVE•added 2025/06/09 1:15 a.m.•62 views

CVE-2025-5852

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclo...

9CVSS9AI score0.00092EPSS
CVE
CVE•added 2024/11/19 7:15 p.m.•55 views

CVE-2024-52714

Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.

9.8CVSS7.9AI score0.00096EPSS
CVE
CVE•added 2024/12/04 11:30 a.m.•54 views

CVE-2024-52272

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50

9.8CVSS6.7AI score0.00124EPSS
CVE
CVE•added 2025/03/02 11:15 a.m.•53 views

CVE-2025-1814

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely...

9.8CVSS7.1AI score0.00034EPSS
CVE
CVE•added 2024/11/02 2:15 p.m.•47 views

CVE-2024-10698

A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The explo...

9.8CVSS8.9AI score0.00497EPSS
CVE
CVE•added 2024/12/04 11:30 a.m.•47 views

CVE-2024-52275

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.

9.8CVSS6.7AI score0.00136EPSS
CVE
CVE•added 2023/05/27 8:15 a.m.•46 views

CVE-2023-2923

A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and ma...

9.8CVSS8.2AI score0.00097EPSS
CVE
CVE•added 2023/10/03 8:15 p.m.•46 views

CVE-2023-40830

Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.

9.8CVSS9.4AI score0.00121EPSS
CVE
CVE•added 2025/03/14 2:15 p.m.•46 views

CVE-2025-29030

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.

9.8CVSS7.9AI score0.00082EPSS
CVE
CVE•added 2024/12/04 11:30 a.m.•45 views

CVE-2024-52273

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50

9.8CVSS6.7AI score0.00124EPSS
CVE
CVE•added 2025/03/14 2:15 p.m.•45 views

CVE-2025-29029

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.

9.8CVSS7.9AI score0.00082EPSS
CVE
CVE•added 2025/03/14 2:15 p.m.•44 views

CVE-2025-29031

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.

9.8CVSS7.9AI score0.00082EPSS
CVE
CVE•added 2024/12/04 11:30 a.m.•41 views

CVE-2024-52274

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50

9.8CVSS6.7AI score0.00124EPSS
CVE
CVE•added 2025/06/09 1:15 a.m.•41 views

CVE-2025-5853

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. Th...

9CVSS8.9AI score0.00148EPSS
CVE
CVE•added 2025/06/09 1:15 a.m.•41 views

CVE-2025-5854

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has...

9CVSS8.8AI score0.00092EPSS
CVE
CVE•added 2025/06/09 2:15 a.m.•40 views

CVE-2025-5855

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...

9.8CVSS8.9AI score0.00138EPSS
CVE
CVE•added 2023/11/20 8:15 p.m.•39 views

CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.

9.8CVSS9.6AI score0.04064EPSS
CVE
CVE•added 2023/08/07 7:15 p.m.•39 views

CVE-2023-38936

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.

9.8CVSS9.6AI score0.00334EPSS
CVE
CVE•added 2023/08/07 7:15 p.m.•39 views

CVE-2023-38937

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.

9.8CVSS9.6AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•39 views

CVE-2023-40839

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute commands.

9.8CVSS9.6AI score0.00114EPSS
CVE
CVE•added 2023/08/07 7:15 p.m.•36 views

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

9.8CVSS9.6AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•35 views

CVE-2023-40840

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."

9.8CVSS9.3AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•35 views

CVE-2023-40845

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks.

9.8CVSS9.4AI score0.00121EPSS
CVE
CVE•added 2023/08/07 7:15 p.m.•34 views

CVE-2023-38931

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.

9.8CVSS9.6AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•34 views

CVE-2023-40842

Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."

9.8CVSS9.3AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•33 views

CVE-2023-40841

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node,"

9.8CVSS9.3AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•30 views

CVE-2023-40843

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."

9.8CVSS9.3AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•29 views

CVE-2023-40848

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858."

9.8CVSS9.3AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•28 views

CVE-2023-40844

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'

9.8CVSS9.3AI score0.00121EPSS
CVE
CVE•added 2023/08/30 5:15 p.m.•28 views

CVE-2023-40847

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check.

9.8CVSS9.3AI score0.00121EPSS