Tenda

Ac7

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-4810

Exploit
  • EPSS 0.82%
  • Veröffentlicht 16.05.2025 20:31:06
  • Zuletzt bearbeitet 24.05.2025 01:12:25

A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument reboot_time leads to stack-ba...

8.8

CVE-2025-4809

Exploit
  • EPSS 1.05%
  • Veröffentlicht 16.05.2025 20:15:22
  • Zuletzt bearbeitet 24.05.2025 01:11:08

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSafeSetMacFilter of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflo...

8.8

CVE-2025-3346

  • EPSS 5.17%
  • Veröffentlicht 07.04.2025 09:31:08
  • Zuletzt bearbeitet 27.05.2025 14:22:29

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptp_server_start_ip/pptp_server_end_ip...

9.8

CVE-2025-29135

Exploit
  • EPSS 0.93%
  • Veröffentlicht 24.03.2025 00:00:00
  • Zuletzt bearbeitet 01.04.2025 19:58:46

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function.

9.8

CVE-2025-29137

Exploit
  • EPSS 0.51%
  • Veröffentlicht 19.03.2025 00:00:00
  • Zuletzt bearbeitet 01.04.2025 20:37:02

Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the form_fast_setting_wifi_set function, which can cause RCE.

9

CVE-2025-1851

  • EPSS 0.99%
  • Veröffentlicht 03.03.2025 05:15:10
  • Zuletzt bearbeitet 10.04.2025 13:32:42

A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer over...