Tenda Ac11 Firmware vulnerabilities

9 known vulnerabilities affecting tenda/ac11_firmware.

Total CVEs
9
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL9

Vulnerabilities

Page 1 of 1
CVE-2021-46265CRITICALCVSS 9.8v02.03.01.104_cn2022-02-15
CVE-2021-46265 [CRITICAL] CWE-787 CVE-2021-46265: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in th Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wanBasicCfg module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
nvd
CVE-2021-46264CRITICALCVSS 9.8v02.03.01.104_cn2022-02-15
CVE-2021-46264 [CRITICAL] CWE-787 CVE-2021-46264: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in th Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
nvd
CVE-2021-46263CRITICALCVSS 9.8v02.03.01.104_cn2022-02-15
CVE-2021-46263 [CRITICAL] CWE-787 CVE-2021-46263: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in th Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
nvd
CVE-2021-46262CRITICALCVSS 9.8v02.03.01.104_cn2022-02-15
CVE-2021-46262 [CRITICAL] CWE-787 CVE-2021-46262: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in th Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
nvd
CVE-2021-46321CRITICALCVSS 9.8v02.03.01.104_cn2022-02-15
CVE-2021-46321 [CRITICAL] CWE-787 CVE-2021-46321: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in th Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiBasicCfg module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
nvd
CVE-2021-31756CRITICALCVSS 9.8≤ 02.03.01.104_cn2021-05-07
CVE-2021-31756 [CRITICAL] CWE-787 CVE-2021-31756: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable.
nvd
CVE-2021-31757CRITICALCVSS 9.8≤ 02.03.01.104_cn2021-05-07
CVE-2021-31757 [CRITICAL] CWE-787 CVE-2021-31757: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request.
nvd
CVE-2021-31755CRITICALCVSS 9.8KEVPoC≤ 02.03.01.104_cn2021-05-07
CVE-2021-31755 [CRITICAL] CWE-787 CVE-2021-31755: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.
nvd
CVE-2021-31758CRITICALCVSS 9.8≤ 02.03.01.104_cn2021-05-07
CVE-2021-31758 [CRITICAL] CWE-787 CVE-2021-31758: An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.
nvd