Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Tenda Subscribe
Filtered by product Ac23
Total 9 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-0782 1 Tenda 2 Ac23, Ac23 Firmware 2023-02-22 N/A 9.8 CRITICAL
A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220640.
CVE-2022-43108 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVE-2022-43107 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
CVE-2022-43106 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.
CVE-2022-43105 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
CVE-2022-43102 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVE-2022-43104 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
CVE-2022-43101 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2022-43103 1 Tenda 2 Ac23, Ac23 Firmware 2022-11-03 N/A 9.8 CRITICAL
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function.