Tenda

Ac8 Firmware

62 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-11745

Exploit
  • EPSS 0.11%
  • Veröffentlicht 26.11.2024 21:15:06
  • Zuletzt bearbeitet 03.12.2024 15:25:28

A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function route_static_check of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow...

7.5

CVE-2024-10280

  • EPSS 0.16%
  • Veröffentlicht 23.10.2024 14:15:04
  • Zuletzt bearbeitet 01.11.2024 14:03:20

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argu...

8.8

CVE-2024-10130

Exploit
  • EPSS 0.65%
  • Veröffentlicht 18.10.2024 22:15:04
  • Zuletzt bearbeitet 28.10.2024 16:08:57

A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer ove...

8.8

CVE-2024-10123

Exploit
  • EPSS 0.65%
  • Veröffentlicht 18.10.2024 20:15:02
  • Zuletzt bearbeitet 28.10.2024 16:06:53

A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compare_parentcontrol_time of the file /goform/saveParentControlInfo. The manipulation of the argument time leads to ...

9.8

CVE-2024-46652

Exploit
  • EPSS 0.23%
  • Veröffentlicht 20.09.2024 16:15:05
  • Zuletzt bearbeitet 17.03.2025 15:00:28

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.

9.8

CVE-2023-48194

Exploit
  • EPSS 0.43%
  • Veröffentlicht 09.07.2024 18:15:08
  • Zuletzt bearbeitet 08.12.2025 13:14:17

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.

8.8

CVE-2024-4066

Exploit
  • EPSS 0.36%
  • Veröffentlicht 23.04.2024 21:15:49
  • Zuletzt bearbeitet 21.01.2025 18:55:06

A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName le...

8.8

CVE-2024-4065

Exploit
  • EPSS 0.35%
  • Veröffentlicht 23.04.2024 20:15:08
  • Zuletzt bearbeitet 21.01.2025 19:05:04

A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow...

8.8

CVE-2024-4064

Exploit
  • EPSS 0.37%
  • Veröffentlicht 23.04.2024 20:15:07
  • Zuletzt bearbeitet 21.01.2025 19:12:43

A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer...

9.8

CVE-2023-4744

Exploit
  • EPSS 0.45%
  • Veröffentlicht 04.09.2023 00:15:07
  • Zuletzt bearbeitet 21.11.2024 08:35:52

A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotel...