Tenda 3

Organization

CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted...

Vulnerabilities & Patching

CVE-2020-10987: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.

Vulnerabilities & Patching

CVE-2021-31755: Tenda AC11 Router Stack Buffer Overflow Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.

Vulnerabilities & Patching