Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
50 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac10 FirmwareTenda Ac1206 Firmware | 10/7/2023 | 17/6/2026 | Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function. | |
| Modificada | Alta (7.5) | 0.88% | — | Tenda Ac1206 Firmware | 12/10/2022 | 17/6/2026 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter. | |
| Modificada | Alta (7.5) | 0.88% | — | Tenda Ac1206 Firmware | 12/10/2022 | 17/6/2026 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter. | |
| Modificada | Alta (7.5) | 0.88% | — | Tenda Ac1206 Firmware | 12/10/2022 | 17/6/2026 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet. | |
| Modificada | Media (6.5) | 0.35% | — | Tenda Ac1206 Firmware | 12/10/2022 | 17/6/2026 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet. | |
| Modificada | Media (6.5) | 0.35% | — | Tenda Ac1206 Firmware | 12/10/2022 | 17/6/2026 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer. | |
| Modificada | Crítica (9.8) | 2.5% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac1206 Firmware | 25/8/2022 | 17/6/2026 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer. |