Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Ax1806_firmware
(Tenda)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 40 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-08-26 | CVE-2024-44553 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. | Ax1806_firmware | 9.8 | ||
| 2024-08-26 | CVE-2024-44555 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. | Ax1806_firmware | 9.8 | ||
| 2024-08-26 | CVE-2024-44557 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. | Ax1806_firmware | 9.8 | ||
| 2024-07-15 | CVE-2024-40414 | A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. | Ax1806_firmware | 9.8 | ||
| 2024-07-15 | CVE-2024-40415 | A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. | Ax1806_firmware | 9.8 | ||
| 2024-07-15 | CVE-2024-40416 | A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. | Ax1806_firmware | 9.8 | ||
| 2022-05-02 | CVE-2022-28572 | Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function | Ax1803_firmware, Ax1806_firmware | 8.8 | ||
| 2022-07-01 | CVE-2022-32030 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand. | Ax1806_firmware | 7.5 | ||
| 2022-07-01 | CVE-2022-32031 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic. | Ax1806_firmware | 7.5 | ||
| 2022-07-06 | CVE-2022-34597 | Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting. | Ax1806_firmware | 9.8 |