cbcvebase.

Tenda Ax1806 Firmware vulnerabilities

61 known vulnerabilities affecting tenda/ax1806_firmware.

Total CVEs
61
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL20HIGH39MEDIUM2

Vulnerabilities

Page 2 of 4
CVE-2024-35571P2CRITICALCVSS 9.8v1.0.0.12024-05-20
CVE-2024-35571 [CRITICAL] CWE-120 CVE-2024-35571: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function form Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
nvd
CVE-2022-28572P3HIGHCVSS 8.8v1.0.0.12022-05-02
CVE-2022-28572 [HIGH] CWE-78 CVE-2022-28572: Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function
nvd
CVE-2023-47456P3CRITICALCVSS 9.1v1.0.0.12023-11-07
CVE-2023-47456 [CRITICAL] CWE-787 CVE-2023-47456: Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by funct Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.
nvd
CVE-2023-47455P3CRITICALCVSS 9.1v1.0.0.12023-11-07
CVE-2023-47455 [CRITICAL] CWE-787 CVE-2023-47455: Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.
nvd
CVE-2024-35579P3HIGHCVSS 7.7v1.0.0.12024-05-20
CVE-2024-35579 [HIGH] CWE-121 CVE-2024-35579: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function for Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.
nvd
CVE-2022-25546P3HIGHCVSS 7.5v1.0.0.12022-03-10
CVE-2022-25546 [HIGH] CWE-787 CVE-2022-25546: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsUser parameter.
nvd
CVE-2022-25547P3HIGHCVSS 7.5v1.0.0.12022-03-10
CVE-2022-25547 [HIGH] CWE-787 CVE-2022-25547: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. Thi Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
nvd
CVE-2024-35578P3HIGHCVSS 8.0v1.0.0.12024-05-20
CVE-2024-35578 [HIGH] CWE-121 CVE-2024-35578: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the functi Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.
nvd
CVE-2025-70747P3HIGHCVSS 7.5v1.0.0.12026-01-14
CVE-2025-70747 [HIGH] CWE-121 CVE-2025-70747: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of th Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2022-32030P3HIGHCVSS 7.5v1.0.0.12022-07-01
CVE-2022-32030 [HIGH] CWE-787 CVE-2022-32030: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the funct Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.
nvd
CVE-2022-32031P3HIGHCVSS 7.5v1.0.0.12022-07-01
CVE-2022-32031 [HIGH] CWE-787 CVE-2022-32031: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the funct Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic.
nvd
CVE-2025-70746P3HIGHCVSS 7.5v1.0.0.12026-01-16
CVE-2025-70746 [HIGH] CWE-121 CVE-2025-70746: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the f Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-71021P3HIGHCVSS 7.5v1.0.0.12026-01-14
CVE-2025-71021 [HIGH] CWE-121 CVE-2025-71021: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-70753P3HIGHCVSS 7.5v1.0.0.12026-01-13
CVE-2025-70753 [HIGH] CWE-787 CVE-2025-70753: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of th Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-70645P3HIGHCVSS 7.5v1.0.0.12026-01-21
CVE-2025-70645 [HIGH] CWE-121 CVE-2025-70645: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-70650P3HIGHCVSS 7.5v1.0.0.12026-01-21
CVE-2025-70650 [HIGH] CWE-121 CVE-2025-70650: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-71020P3HIGHCVSS 7.5v1.0.0.12026-01-16
CVE-2025-71020 [HIGH] CWE-121 CVE-2025-71020: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the s Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-70744P3HIGHCVSS 7.5v1.0.0.12026-01-15
CVE-2025-70744 [HIGH] CWE-121 CVE-2025-70744: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-70656P3HIGHCVSS 7.5v1.0.0.12026-01-15
CVE-2025-70656 [HIGH] CWE-121 CVE-2025-70656: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
CVE-2025-71019P3HIGHCVSS 7.5v1.0.0.12026-01-15
CVE-2025-71019 [HIGH] CWE-121 CVE-2025-71019: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the s Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
nvd
← Previous2 / 4Next →