Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior
Críticas / altas1313▼ 190 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior
159 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.89% | — | Tendacn Ac10u Firmware | 26/1/2024 | 17/6/2026 | A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this vulnerability is the function formQuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public… | |
| Modificada | Crítica (9.8) | 0.98% | — | Tenda Ac10 Firmware | 29/11/2023 | 17/6/2026 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic. | |
| Modificada | Crítica (9.8) | 0.98% | — | Tenda Ac10 Firmware | 29/11/2023 | 17/6/2026 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time. | |
| Modificada | Crítica (9.8) | 0.98% | — | Tenda Ac10 Firmware | 29/11/2023 | 17/6/2026 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info. | |
| Modificada | Crítica (9.8) | 0.98% | — | Tenda Ac10 Firmware | 29/11/2023 | 17/6/2026 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg. | |
| Modificada | Crítica (9.8) | 0.98% | — | Tenda Ac10 Firmware | 29/11/2023 | 17/6/2026 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878. | |
| Modificada | Crítica (9.8) | 0.98% | — | Tenda Ac10 Firmware | 29/11/2023 | 17/6/2026 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function. | |
| Modificada | Crítica (9.8) | 16% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function. | |
| Modificada | Crítica (9.8) | 0.79% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tendacn Ac10u Firmware | 27/9/2023 | 17/6/2026 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac10 Firmware | 18/9/2023 | 17/6/2026 | Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function. | |
| Modificada | Crítica (9.8) | 0.93% | — | Tenda Ac10v4 Firmware | 24/8/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac10v4 Firmware | 24/8/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. | |
| Modificada | Crítica (9.8) | 1.3% | — | Tenda Ac10v4 Firmware | 24/8/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac10 FirmwareTenda Ac1206 FirmwareTenda AC8 FirmwareTenda AC6 Firmware+3 | 7/8/2023 | 17/6/2026 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function. | |
| Modificada | Crítica (9.8) | 0.85% | — | Tenda Ac10 FirmwareTenda Ac1206 FirmwareTenda AC6 FirmwareTenda AC7 Firmware+5 | 7/8/2023 | 17/6/2026 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. | |
| Modificada | Crítica (9.8) | 0.85% | — | Tenda Ac1206 FirmwareTenda AC5 FirmwareTenda AC9 FirmwareTenda AC8 Firmware+1 | 7/8/2023 | 17/6/2026 | Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function. |