Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Ax1803_firmware
(Tenda)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 50 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-11-27 | CVE-2023-49040 | An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function. | Ax1803_firmware | 9.8 | ||
| 2024-01-10 | CVE-2023-51958 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. | Ax1803_firmware | 9.8 | ||
| 2024-01-10 | CVE-2023-51972 | Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp. | Ax1803_firmware | 9.8 | ||
| 2024-01-10 | CVE-2023-51961 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. | Ax1803_firmware | 9.8 | ||
| 2024-01-10 | CVE-2023-51957 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. | Ax1803_firmware | 9.8 | ||
| 2023-11-14 | CVE-2022-45781 | Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName. | Ax1803_firmware | 8.8 | ||
| 2023-11-20 | CVE-2023-48110 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack | Ax1803_firmware | 7.5 | ||
| 2023-11-20 | CVE-2023-48111 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack | Ax1803_firmware | 7.5 | ||
| 2024-04-02 | CVE-2024-30621 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan. | Ax1803_firmware | 9.8 | ||
| 2024-04-02 | CVE-2024-30620 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan. | Ax1803_firmware | 9.8 |