Tenda Ac6 Firmware vulnerabilities

105 known vulnerabilities affecting tenda/ac6_firmware.

Total CVEs
105
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL47HIGH46MEDIUM12

Vulnerabilities

Page 4 of 6
CVE-2023-40830CRITICALCVSS 9.8v15.03.05.192023-10-03
CVE-2023-40830 [CRITICAL] CWE-120 CVE-2023-40830: Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the l Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
nvd
CVE-2021-40546MEDIUMCVSS 4.9v02.03.01.262023-09-05
CVE-2021-40546 [MEDIUM] CWE-404 CVE-2021-40546: Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) t Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long string in the wifiPwd_5G parameter to /goform/setWifi.
nvd
CVE-2023-40838CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40838 [CRITICAL] CWE-78 CVE-2023-40838: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.
nvd
CVE-2023-40848CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40848 [CRITICAL] CWE-787 CVE-2023-40848: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858."
nvd
CVE-2023-40837CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40837 [CRITICAL] CWE-78 CVE-2023-40837: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands.
nvd
CVE-2023-40839CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40839 [CRITICAL] CWE-78 CVE-2023-40839: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute commands.
nvd
CVE-2023-40841CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40841 [CRITICAL] CWE-787 CVE-2023-40841: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "ad Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node,"
nvd
CVE-2023-40844CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40844 [CRITICAL] CWE-787 CVE-2023-40844: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'fo Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'
nvd
CVE-2023-40847CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40847 [CRITICAL] CWE-787 CVE-2023-40847: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check.
nvd
CVE-2023-40842CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40842 [CRITICAL] CWE-787 CVE-2023-40842: Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."
nvd
CVE-2023-40845CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40845 [CRITICAL] CWE-787 CVE-2023-40845: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'su Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks.
nvd
CVE-2023-40843CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40843 [CRITICAL] CWE-787 CVE-2023-40843: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "su Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."
nvd
CVE-2023-40840CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40840 [CRITICAL] CWE-787 CVE-2023-40840: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fr Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."
nvd
CVE-2023-40846CRITICALCVSS 9.8v15.03.05.162023-08-28
CVE-2023-40846 [CRITICAL] CWE-787 CVE-2023-40846: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
nvd
CVE-2023-39670CRITICALCVSS 9.8v15.03.05.162023-08-18
CVE-2023-39670 [CRITICAL] CWE-120 CVE-2023-39670: Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fg Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
nvd
CVE-2023-38936CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38936 [CRITICAL] CWE-787 CVE-2023-38936: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
nvd
CVE-2023-38933CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38933 [CRITICAL] CWE-787 CVE-2023-38933: Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2 Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
nvd
CVE-2023-38931CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38931 [CRITICAL] CWE-787 CVE-2023-38931: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.
nvd
CVE-2023-38937CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38937 [CRITICAL] CWE-787 CVE-2023-38937: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
nvd
CVE-2022-40010MEDIUMCVSS 5.4v15.03.06.50_multi2023-06-26
CVE-2022-40010 [MEDIUM] CWE-79 CVE-2022-40010: Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-sit Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module.
nvd
← Previous4 / 6Next →