Ac9 Firmware vulnerabilities

47 known vulnerabilities in Ac9 Firmware from Tenda. 47 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ac7: Out-of-bounds Write

  CVE-2023-38933Aug 7, 2023Tenda

  Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientStat

• 9.8 Critical severity

  ac7: Out-of-bounds Write

  CVE-2023-38930Aug 7, 2023Tenda

  Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.

• 9.8 Critical severity

  f1202: Out-of-bounds Write

  CVE-2023-37717Jul 14, 2023Tenda

  Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

• 9.8 Critical severity

  f1202: Out-of-bounds Write

  CVE-2023-37716Jul 14, 2023Tenda

  Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.

• 9.8 Critical severity

  Ac9 Firmware: Out-of-bounds Write

  CVE-2022-28560May 3, 2022TendaEPSS 1.69%

  There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload

• 9.8 Critical severity

  Ac9 Firmware: Out-of-bounds Write

  CVE-2022-27022Apr 7, 2022TendaEPSS 1.69%

  There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root shell through a constructed payload.

• 9.8 Critical severity

  Tenda AC7, AC9, and AC10 Routers Command Injection Exploited

  CVE-2018-14558Oct 30, 2018TendaEPSS 8.51%

  An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attack