CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2023-37144
https://notcve.org/view.php?id=CVE-2023-37144
Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. • https://github.com/DaDong-G/Vulnerability_info/blob/main/ac10_command_injection/Readme.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 1CVE-2022-40010 – Tenda AC6 AC1200 15.03.06.50_multi Cross Site Scripting
https://notcve.org/view.php?id=CVE-2022-40010
Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module. Tenda AC6 AC1200 version 15.03.06.50_multi suffers from a persistent cross site scripting vulnerability. • http://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.7EPSS: 0%CPEs: 2EXPL: 0CVE-2023-34568
https://notcve.org/view.php?id=CVE-2023-34568
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. • https://hackmd.io/%400dayResearch/ryR8IzMH2 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 2EXPL: 0CVE-2023-34569
https://notcve.org/view.php?id=CVE-2023-34569
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. • https://hackmd.io/%400dayResearch/HymuzffSh • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 2EXPL: 0CVE-2023-34571
https://notcve.org/view.php?id=CVE-2023-34571
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet. • https://hackmd.io/%400dayResearch/S1GcUxzSn • CWE-787: Out-of-bounds Write •