Tenda

Ac8 Firmware

59 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-10123

Exploit
  • EPSS 0.79%
  • Veröffentlicht 18.10.2024 20:15:02
  • Zuletzt bearbeitet 28.10.2024 16:06:53

A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compare_parentcontrol_time of the file /goform/saveParentControlInfo. The manipulation of the argument time leads to ...

9.8

CVE-2024-46652

Exploit
  • EPSS 0.23%
  • Veröffentlicht 20.09.2024 16:15:05
  • Zuletzt bearbeitet 17.03.2025 15:00:28

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.

9.8

CVE-2023-48194

Exploit
  • EPSS 0.44%
  • Veröffentlicht 09.07.2024 18:15:08
  • Zuletzt bearbeitet 08.12.2025 13:14:17

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.

8.8

CVE-2024-4066

Exploit
  • EPSS 0.59%
  • Veröffentlicht 23.04.2024 21:15:49
  • Zuletzt bearbeitet 21.01.2025 18:55:06

A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName le...

8.8

CVE-2024-4065

Exploit
  • EPSS 0.35%
  • Veröffentlicht 23.04.2024 20:15:08
  • Zuletzt bearbeitet 21.01.2025 19:05:04

A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow...

8.8

CVE-2024-4064

Exploit
  • EPSS 0.61%
  • Veröffentlicht 23.04.2024 20:15:07
  • Zuletzt bearbeitet 21.01.2025 19:12:43

A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer...

9.8

CVE-2023-4744

Exploit
  • EPSS 0.69%
  • Veröffentlicht 04.09.2023 00:15:07
  • Zuletzt bearbeitet 21.11.2024 08:35:52

A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotel...

9.8

CVE-2023-40900

Exploit
  • EPSS 0.12%
  • Veröffentlicht 24.08.2023 18:15:08
  • Zuletzt bearbeitet 08.12.2025 13:14:17

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList.

9.8

CVE-2023-40899

Exploit
  • EPSS 0.12%
  • Veröffentlicht 24.08.2023 18:15:08
  • Zuletzt bearbeitet 08.12.2025 13:14:17

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.

9.8

CVE-2023-40898

Exploit
  • EPSS 0.12%
  • Veröffentlicht 24.08.2023 18:15:08
  • Zuletzt bearbeitet 08.12.2025 13:14:17

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.