Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Total 1846 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-32306 1 Tenda 2 Ac10u, Ac10u Firmware 2026-06-17 N/A 5.7 MEDIUM
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
CVE-2024-32305 1 Tenda 2 A18, A18 Firmware 2026-06-17 N/A 8.8 HIGH
Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
CVE-2024-32303 1 Tenda 2 Ac15, Ac15 Firmware 2026-06-17 N/A 8.0 HIGH
Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
CVE-2024-32302 1 Tenda 2 Fh1202, Fh1202 Firmware 2026-06-17 N/A 6.3 MEDIUM
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32301 1 Tenda 2 Ac7, Ac7 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32299 1 Tenda 2 Fh1203, Fh1203 Firmware 2026-06-17 N/A 8.8 HIGH
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32293 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 8.0 HIGH
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function.
CVE-2024-32292 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 8.8 HIGH
Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
CVE-2024-32291 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 7.5 HIGH
Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function.
CVE-2024-32290 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 6.7 MEDIUM
Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function.
CVE-2024-32288 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 6.3 MEDIUM
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function.
CVE-2024-32287 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function.
CVE-2024-32286 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.
CVE-2024-32285 1 Tenda 2 W30e, W30e Firmware 2026-06-17 N/A 8.0 HIGH
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function.
CVE-2024-32283 1 Tenda 2 Fh1203, Fh1203 Firmware 2026-06-17 N/A 7.3 HIGH
Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
CVE-2024-32282 1 Tenda 2 Fh1202, Fh1202 Firmware 2026-06-17 N/A 6.3 MEDIUM
Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
CVE-2024-32281 1 Tenda 2 Ac7, Ac7 Firmware 2026-06-17 N/A 8.8 HIGH
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
CVE-2024-30891 1 Tenda 2 Ac18, Ac18 Firmware 2026-06-17 N/A 8.8 HIGH
A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.
CVE-2024-30840 1 Tenda 2 Ac15, Ac15 Firmware 2026-06-17 N/A 6.5 MEDIUM
A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function.
CVE-2024-30645 1 Tenda 2 Ac15, Ac15 Firmware 2026-06-17 N/A 8.0 HIGH
Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.