Tenda

W9 Firmware

18 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8

CVE-2024-52788

Exploit
  • EPSS 0.13%
  • Veröffentlicht 19.11.2024 17:15:56
  • Zuletzt bearbeitet 07.04.2025 20:03:00

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

8.8

CVE-2024-4244

  • EPSS 0.36%
  • Veröffentlicht 26.04.2024 22:15:08
  • Zuletzt bearbeitet 27.01.2025 18:28:39

A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456). Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLease...

8.8

CVE-2024-4243

  • EPSS 0.59%
  • Veröffentlicht 26.04.2024 22:15:08
  • Zuletzt bearbeitet 27.01.2025 18:28:50

A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible ...

8.8

CVE-2024-4242

  • EPSS 0.59%
  • Veröffentlicht 26.04.2024 21:15:50
  • Zuletzt bearbeitet 27.01.2025 18:29:46

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This issue affects the function formwrlSSIDget of the file /goform/wifiSSIDget. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The a...

8.8

CVE-2024-4241

  • EPSS 0.36%
  • Veröffentlicht 26.04.2024 21:15:50
  • Zuletzt bearbeitet 27.01.2025 18:29:59

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. This vulnerability affects the function formQosManageDouble_auto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can b...

8.8

CVE-2024-4240

  • EPSS 0.25%
  • Veröffentlicht 26.04.2024 21:15:50
  • Zuletzt bearbeitet 27.01.2025 18:30:07

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. This affects the function formQosManageDouble_user. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate t...

9.8

CVE-2024-0542

  • EPSS 0.14%
  • Veröffentlicht 15.01.2024 05:15:09
  • Zuletzt bearbeitet 21.11.2024 08:46:50

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The a...

9.8

CVE-2024-0540

  • EPSS 0.1%
  • Veröffentlicht 15.01.2024 05:15:08
  • Zuletzt bearbeitet 21.11.2024 08:46:49

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible t...

9.8

CVE-2024-0541

  • EPSS 0.26%
  • Veröffentlicht 15.01.2024 05:15:08
  • Zuletzt bearbeitet 21.11.2024 08:46:49

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is the function formAddSysLogRule of the component httpd. The manipulation of the argument sysRulenEn leads to stack-based buffer ov...

9.8

CVE-2024-0539

  • EPSS 0.22%
  • Veröffentlicht 15.01.2024 05:15:08
  • Zuletzt bearbeitet 21.11.2024 08:46:49

A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosManage_user of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may...