Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 449 respecto a la semana anterior
Críticas / altas1325▼ 128 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)268▼ 240 respecto a la semana anterior
159 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac10 FirmwareTenda Ac1206 FirmwareTenda AC6 FirmwareTenda AC7 Firmware+5 | 7/8/2023 | 17/6/2026 | Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac10 FirmwareTenda Ac1206 FirmwareTenda AC8 FirmwareTenda AC6 Firmware+4 | 7/8/2023 | 17/6/2026 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function. | |
| Modificada | Crítica (9.8) | 0.93% | — | Tenda F1202 FirmwareTenda Fh1202 FirmwareTenda Ac10 FirmwareTenda Ac1206 Firmware+3 | 14/7/2023 | 17/6/2026 | Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient. | |
| Modificada | Crítica (9.8) | 0.93% | — | Tenda F1202 FirmwareTenda Fh1202 FirmwareTenda Ac10 FirmwareTenda Ac1206 Firmware+3 | 14/7/2023 | 17/6/2026 | Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac10 FirmwareTenda Ac1206 Firmware | 10/7/2023 | 17/6/2026 | Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda Ac10 FirmwareTenda Ac1206 Firmware | 10/7/2023 | 17/6/2026 | Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function. | |
| Modificada | Crítica (9.8) | 2.4% | — | Tendacn Ac10 Firmware | 7/7/2023 | 17/6/2026 | Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. | |
| Modificada | Media (6.7) | 0.32% | — | Tenda Ac10 Firmware | 8/6/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet. | |
| Modificada | Media (6.7) | 0.32% | — | Tenda Ac10 Firmware | 8/6/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName. | |
| Modificada | Media (6.7) | 0.32% | — | Tenda Ac10 Firmware | 8/6/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. | |
| Modificada | Media (6.7) | 0.32% | — | Tenda Ac10 Firmware | 8/6/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. | |
| Modificada | Media (6.7) | 0.32% | — | Tenda Ac10 Firmware | 8/6/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. | |
| Modificada | Crítica (9.8) | 0.93% | — | Tenda Ac10 Firmware | 8/6/2023 | 17/6/2026 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda Ac10 Firmware | 7/4/2023 | 17/6/2026 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |
| Modificada | Alta (7.5) | 0.90% | — | Tenda Ac10 Firmware | 16/12/2022 | 17/6/2026 | Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda Ac10 Firmware | 17/10/2022 | 17/6/2026 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo. |