Tenda Ac1206 Firmware 15.03.06.23 Multi Td01

CPE Details

Tenda Ac1206 Firmware 15.03.06.23 Multi Td01
tenda
ac1206_firmware
15.03.06.23_multi_td01
2023-09-29
01h57 +00:00
2023-09-29
01h57 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23_multi_td01:*:*:*:*:*:*:*

Informations

Vendor

tenda

Product

ac1206_firmware

Version

15.03.06.23_multi_td01

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-10434 2024-10-28 00h31 +00:00 A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ate_Tenda_mfg_check_usb/ate_Tenda_mfg_check_usb3 of the file /goform/ate. The manipulation of the argument arg leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
8.7
High
CVE-2022-42077 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.
6.5
Medium
CVE-2022-42078 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.
6.5
Medium
CVE-2022-42079 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet.
7.5
High
CVE-2022-42080 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter.
7.5
High
CVE-2022-42081 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter.
7.5
High
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.