Tenda

I24

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2025-15371

  • EPSS 0.01%
  • Veröffentlicht 31.12.2025 01:15:54
  • Zuletzt bearbeitet 31.12.2025 20:42:15

A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credent...

8.8

CVE-2025-4007

Exploit
  • EPSS 0.62%
  • Veröffentlicht 28.04.2025 07:31:05
  • Zuletzt bearbeitet 30.07.2025 18:57:09

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json...

8.8

CVE-2025-3820

Exploit
  • EPSS 0.63%
  • Veröffentlicht 19.04.2025 20:31:06
  • Zuletzt bearbeitet 30.07.2025 18:57:54

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the argument hostIp1/hostIp2 leads to stack...

8.8

CVE-2025-3803

Exploit
  • EPSS 0.62%
  • Veröffentlicht 19.04.2025 15:15:47
  • Zuletzt bearbeitet 30.07.2025 18:57:31

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-base...

8.8

CVE-2025-3802

Exploit
  • EPSS 0.62%
  • Veröffentlicht 19.04.2025 14:31:05
  • Zuletzt bearbeitet 30.07.2025 18:57:42

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSet of the file /bin/httpd. The manipulation of the argument pingIP leads to stack-based buff...