Tenda Ac10 Firmware vulnerabilities
92 known vulnerabilities affecting tenda/ac10_firmware.
Total CVEs
92
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL47HIGH31MEDIUM14
Vulnerabilities
Page 2 of 5
CVE-2022-42165P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42165 [CRITICAL] CWE-787 CVE-2022-42165: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
nvd
CVE-2022-42168P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42168 [CRITICAL] CWE-787 CVE-2022-42168: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
nvd
CVE-2022-42171P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42171 [CRITICAL] CWE-787 CVE-2022-42171: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.
nvd
CVE-2022-42167P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42167 [CRITICAL] CWE-787 CVE-2022-42167: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.
nvd
CVE-2022-42169P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42169 [CRITICAL] CWE-787 CVE-2022-42169: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
nvd
CVE-2022-42170P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42170 [CRITICAL] CWE-787 CVE-2022-42170: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.
nvd
CVE-2022-42164P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42164 [CRITICAL] CWE-787 CVE-2022-42164: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
nvd
CVE-2022-42166P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42166 [CRITICAL] CWE-787 CVE-2022-42166: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
nvd
CVE-2022-42163P3CRITICALCVSS 9.8v15.03.06.232022-10-17
CVE-2022-42163 [CRITICAL] CWE-787 CVE-2022-42163: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
nvd
CVE-2023-38936P3CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38936 [CRITICAL] CWE-787 CVE-2023-38936: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
nvd
CVE-2023-38933P3CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38933 [CRITICAL] CWE-787 CVE-2023-38933: Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
nvd
CVE-2023-45484P3CRITICALCVSS 9.8v16.03.10.132023-11-29
CVE-2023-45484 [CRITICAL] CWE-787 CVE-2023-45484: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
nvd
CVE-2023-45481P3CRITICALCVSS 9.8v16.03.10.132023-11-29
CVE-2023-45481 [CRITICAL] CWE-787 CVE-2023-45481: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
nvd
CVE-2023-45479P3CRITICALCVSS 9.8v16.03.10.132023-11-29
CVE-2023-45479 [CRITICAL] CWE-787 CVE-2023-45479: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098.
nvd
CVE-2023-34566P3CRITICALCVSS 9.8vus_ac10v4.0si_v16.03.10.13_cn2023-06-08
CVE-2023-34566 [CRITICAL] CWE-787 CVE-2023-34566: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo.
nvd
CVE-2023-45483P3CRITICALCVSS 9.8v16.03.10.132023-11-29
CVE-2023-45483 [CRITICAL] CWE-787 CVE-2023-45483: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time.
nvd
CVE-2023-45480P3CRITICALCVSS 9.8v16.03.10.132023-11-29
CVE-2023-45480 [CRITICAL] CWE-787 CVE-2023-45480: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878.
nvd
CVE-2023-45482P3CRITICALCVSS 9.8v16.03.10.132023-11-29
CVE-2023-45482 [CRITICAL] CWE-787 CVE-2023-45482: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
nvd
CVE-2023-38931P3CRITICALCVSS 9.8v15.03.06.23v16.03.10.132023-08-07
CVE-2023-38931 [CRITICAL] CWE-787 CVE-2023-38931: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.
nvd
CVE-2023-38937P3CRITICALCVSS 9.8v15.03.06.23v16.03.10.132023-08-07
CVE-2023-38937 [CRITICAL] CWE-787 CVE-2023-38937: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
nvd