Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

60 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-37822	Modificada	Alta (7.8)	0.34%	—	Tenda Ax1803 Firmware	25/8/2022	17/6/2026	Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic.
CVE-2022-37821	Modificada	Alta (7.8)	0.34%	—	Tenda Ax1803 Firmware	25/8/2022	17/6/2026	Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince.
CVE-2022-37820	Modificada	Alta (7.8)	0.34%	—	Tenda Ax1803 Firmware	25/8/2022	17/6/2026	Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS.
CVE-2022-37819	Modificada	Alta (7.8)	0.34%	—	Tenda Ax1803 Firmware	25/8/2022	17/6/2026	Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime.
CVE-2022-37818	Modificada	Alta (7.8)	0.34%	—	Tenda Ax1803 Firmware	25/8/2022	17/6/2026	Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.
CVE-2022-37817	Modificada	Alta (7.8)	0.34%	—	Tenda Ax1803 Firmware	25/8/2022	17/6/2026	Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind.
CVE-2022-34596	Modificada	Crítica (9.8)	2.4%	—	Tenda Ax1803 Firmware	6/7/2022	17/6/2026	Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-34595	Modificada	Crítica (9.8)	2.4%	—	Tenda Ax1803 Firmware	6/7/2022	17/6/2026	Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.
CVE-2022-30040	Modificada	Alta (7.5)	1.9%	💥 PoC	Tenda Ax1803 Firmware	11/5/2022	17/6/2026	Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of…
CVE-2022-28572	Modificada	Alta (8.8)	2.6%	—	Tenda Ax1806 Firmware Tenda Ax1803 Firmware	2/5/2022	17/6/2026	Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function