Ac15 Firmware vulnerabilities

42 known vulnerabilities in Ac15 Firmware from Tenda. 42 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Ac15 Firmware: Out-of-bounds Write

  CVE-2022-28556May 4, 2022TendaEPSS 1.05%

  Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf func

• 9.8 Critical severity

  Tenda AC1900 Router AC15 Model Remote Code Execution Exploited

  CVE-2020-10987Jul 13, 2020TendaEPSS 79.8%

  The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.