Tenda

Hg10 Firmware

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2026-86167

Exploit
  • EPSS 1.63%
  • Veröffentlicht 06.09.2026 04:30:12
  • Zuletzt bearbeitet 08.09.2026 18:21:15

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remote exploitatio...

9

CVE-2026-86166

Exploit
  • EPSS 0.48%
  • Veröffentlicht 06.09.2026 04:00:10
  • Zuletzt bearbeitet 11.09.2026 21:17:35

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The...

10

CVE-2026-86165

Exploit
  • EPSS 0.64%
  • Veröffentlicht 06.09.2026 03:30:08
  • Zuletzt bearbeitet 08.09.2026 14:17:31

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated rem...

9

CVE-2026-85110

Exploit
  • EPSS 0.48%
  • Veröffentlicht 03.09.2026 13:45:13
  • Zuletzt bearbeitet 03.09.2026 17:25:25

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of ...

10

CVE-2026-85109

Exploit
  • EPSS 0.62%
  • Veröffentlicht 03.09.2026 13:30:12
  • Zuletzt bearbeitet 03.09.2026 17:25:25

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attac...

10

CVE-2026-82542

Exploit
  • EPSS 0.64%
  • Veröffentlicht 30.08.2026 12:30:09
  • Zuletzt bearbeitet 01.09.2026 15:17:32

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflo...

8.8

CVE-2026-6988

Exploit
  • EPSS 0.62%
  • Veröffentlicht 25.04.2026 17:00:24
  • Zuletzt bearbeitet 30.04.2026 14:10:15

A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is pos...

5.8

CVE-2026-1690

Exploit
  • EPSS 3.86%
  • Veröffentlicht 30.01.2026 16:32:11
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of the argument sysCmd causes command injection. The attack may be initiated remotely. The ex...

7.5

CVE-2026-1689

Exploit
  • EPSS 2.54%
  • Veröffentlicht 30.01.2026 16:32:08
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login Interface. The manipulation of the argument Host re...

7.5

CVE-2026-1687

Exploit
  • EPSS 2.6%
  • Veröffentlicht 30.01.2026 16:02:09
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a manipulation of the argument serverString can lead to command...