Tendacn Ac10U Firmware vulnerabilities

23 known vulnerabilities affecting tendacn/ac10u_firmware.

Total CVEs

23

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL23

Vulnerabilities

Page 2 of 2

CVE-2023-44018CRITICALCVSS 9.8v15.03.06.49_multi_tde012023-09-27

CVE-2023-44018 [CRITICAL] CWE-119 CVE-2023-44018: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.

CVE-2021-45401CRITICALCVSS 9.8v15.03.06.49_multi2022-02-18

CVE-2021-45401 [CRITICAL] CWE-77 CVE-2021-45401: A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via the setUsbUnload functionality. The vulnerability is caused because the client controlled "deviceName" value is passed directly to the "doSystemCmd" function.

CVE-2020-22079CRITICALCVSS 9.8v15.03.06.48_multi_tde012021-10-29

CVE-2020-22079 [CRITICAL] CWE-787 CVE-2020-22079: Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 a Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.

← Previous2 / 2