Tenda Ac1206 Firmware 15.03.06.23 Multi Td01

CPE Details

Tenda Ac1206 Firmware 15.03.06.23 Multi Td01
tenda
ac1206_firmware
15.03.06.23_multi_td01
2023-09-29
01h57 +00:00
2023-09-29
01h57 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23_multi_td01:*:*:*:*:*:*:*

Informations

Vendor

tenda

Product

ac1206_firmware

Version

15.03.06.23_multi_td01

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-10434 2024-10-28 00h31 +00:00 A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ate_Tenda_mfg_check_usb/ate_Tenda_mfg_check_usb3 of the file /goform/ate. The manipulation of the argument arg leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
8.7
Haute
CVE-2022-42077 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.
6.5
Moyen
CVE-2022-42078 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.
6.5
Moyen
CVE-2022-42079 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet.
7.5
Haute
CVE-2022-42080 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter.
7.5
Haute
CVE-2022-42081 2022-10-11 22h00 +00:00 Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter.
7.5
Haute
Les informations affichées sur CVE Find proviennent de plusieurs sources de référence rigoureusement sélectionnées. Les données CVE sont fournies par MITRE Corporation et la National Vulnerability Database (NVD). Le catalogue des vulnérabilités activement exploitées (KEV) provient de la Cybersecurity and Infrastructure Security Agency (CISA), tandis que les scores EPSS sont issus de FIRST.org. Enfin, les données relatives aux faiblesses logicielles (CWE) et aux schémas d'attaque courants (CAPEC) sont maintenues par MITRE Corporation, et les informations sur les configurations logicielles et matérielles (CPE) proviennent du NVD.