İçeriğe atla
Noroxi

tenda kayıtları

tenda üreticisine ait 1.847 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
3 · %0,2
Silahlaştırılmış
3 · %0,2
Pre-auth RCE
174
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
478 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

1.847 kayıt
  • CVE-2021-31755
    95Hemen

    An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %87

    tenda · ac11 firmware7 May 2021

  • CVE-2020-10987
    93Hemen

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via t

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %80

    tenda · ac15 firmware13 Tem 2020

  • CVE-2018-14558
    72Bu hafta

    An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %9

    tenda · ac7 firmware30 Eki 2018

  • CVE-2022-42233
    52Planlayın

    Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    tenda · 11n firmware20 Eki 2022

  • CVE-2022-32054
    49Planlayın

    Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parame

    KritikCVSS 9,8İstismar yokEPSS %35

    tenda · ac10 firmware7 Tem 2022

  • CVE-2022-30023
    47Planlayın

    Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.

    YüksekCVSS 8,8Kavram kanıtıEPSS %39

    tenda · hg9 firmware16 Haz 2022

  • CVE-2022-35555
    47Planlayın

    A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput para

    KritikCVSS 9,8İstismar yokEPSS %26

    tenda · w6 firmware12 Ağu 2022

  • CVE-2023-27076
    46Planlayın

    Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.

    KritikCVSS 9,8İstismar yokEPSS %23

    tenda · g103 firmware10 Nis 2023

  • CVE-2022-28557
    46Planlayın

    There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin dev

    KritikCVSS 9,8İstismar yokEPSS %23

    tenda · ac15 firmware4 May 2022

  • CVE-2022-29592
    45Planlayın

    Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).

    KritikCVSS 9,8İstismar yokEPSS %20

    tenda · tx9 pro firmware5 May 2022

  • CVE-2015-5995
    45Planlayın

    Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain adminis

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    tenda · n3 wireless n15031 Ara 2015

  • CVE-2022-24144
    45Planlayın

    Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting.

    KritikCVSS 9,8İstismar yokEPSS %19

    tenda · ax3 firmware3 Şub 2022

  • CVE-2023-46370
    44Planlayın

    Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

    KritikCVSS 9,8İstismar yokEPSS %18

    tenda · w18e firmware25 Eki 2023

  • CVE-2023-25234
    44Planlayın

    Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface.

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    tenda · ac500 firmware27 Şub 2023

  • CVE-2021-46393
    44Planlayın

    There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN.

    KritikCVSS 9,8İstismar yokEPSS %16

    tenda · ax3 firmware4 Mar 2022

  • CVE-2014-5246
    44Planlayın

    The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administra

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    tenda · a5s firmware22 Ağu 2014

  • CVE-2022-40855
    43Planlayın

    Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'.

    KritikCVSS 9,8İstismar yokEPSS %14

    tenda · w20e firmware23 Eyl 2022

  • CVE-2022-24995
    43Planlayın

    Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime.

    KritikCVSS 9,8İstismar yokEPSS %14

    tenda · ax3 firmware10 Mar 2022

  • CVE-2023-49043
    43Planlayın

    Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter i

    KritikCVSS 9,8İstismar yokEPSS %13

    tenda · ax1803 firmware27 Kas 2023

  • CVE-2023-51092
    43Planlayın

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.

    KritikCVSS 9,8İstismar yokEPSS %13

    tenda · m3 firmware26 Ara 2023

  • CVE-2022-25450
    42Planlayın

    Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.

    KritikCVSS 9,8İstismar yokEPSS %12

    tenda · ac6 firmware18 Mar 2022

  • CVE-2022-35559
    42Planlayın

    A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 paramet

    KritikCVSS 9,8İstismar yokEPSS %11

    tenda · w6 firmware12 Ağu 2022

  • CVE-2024-46048
    42Planlayın

    Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i

    KritikCVSS 9,8İstismar yokEPSS %11

    tenda · fh451 firmware13 Eyl 2024

  • CVE-2022-25414
    42Planlayın

    Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.

    KritikCVSS 9,8İstismar yokEPSS %10

    tenda · ac9 firmware24 Şub 2022

  • CVE-2022-32032
    42Planlayın

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule.

    KritikCVSS 9,8İstismar yokEPSS %10

    tenda · ax1806 firmware1 Tem 2022