Tenda Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Tenda AC974
Tenda AC672
Tenda AC1571
Tenda AC1870
Tenda AC1062

Przeciwdziałanie

Official Fix6
Temporary Fix0
Workaround3
Unavailable0
Not Defined1012

Wykorzystywanie

High0
Functional1
Proof-of-Concept194
Unproven0
Not Defined826

Wektor dostępu

Not Defined0
Physical2
Local19
Adjacent690
Network310

Uwierzytelnianie

Not Defined0
High25
Low918
None78

Interakcja z użytkownikiem

Not Defined0
Required22
None999

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤437
≤519
≤6185
≤7234
≤8351
≤9178
≤1016

CVSSv3 Temp

≤10
≤20
≤31
≤441
≤516
≤6198
≤7233
≤8466
≤959
≤107

VulDB

≤10
≤20
≤32
≤470
≤534
≤6634
≤768
≤842
≤9162
≤109

NVD

≤10
≤20
≤30
≤41
≤53
≤611
≤717
≤8206
≤918
≤10366

CNA

≤10
≤20
≤30
≤40
≤511
≤60
≤71
≤813
≤913
≤101

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤101

Exploit 0-day

<1k42
<2k583
<5k396
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k716
<2k277
<5k28
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (90): 4G300 (1), 11N (1), A5s (1), A15 (17), A18 (7), A32 (1), AC-10U AC1200 (1), AC5 (27), AC5 AC1200 (1), AC6 (72), AC7 (43), AC8 (19), AC8V4 (4), AC9 (74), AC9 Router AC1200 (2), AC10 (62), AC10 V4 (1), AC10-1200 (3), AC10U (37), AC10V4 (1), AC11 (9), AC15 (71), AC15V1.0 (2), AC18 (70), AC19 (1), AC21 (13), AC23 (21), AC118 (6), AC500 (14), AC1200 (23), AC1206 (31), AC1900 (5), ADSL2-2+ Modem D840R (1), ADSL Modem (1), AX3 (34), AX9 (9), AX12 (24), AX1803 (49), AX1806 (26), CP3 (7), CP7 (1), D152 (1), D820R ADSL2-2+ Modem (1), F1200 (2), F1202 (25), F1203 (33), FH1202 (31), FH1203 (31), FH1205 (26), G0 (1), G1 (25), G3 (28), G103 (3), HG6 (1), IT7-LCS (1), IT7-PCS (1), IT7-PRS (1), M3 (35), N300 F3 (1), N300 Wireless N VDSL2 Modem Router (1), N301 (2), N301 Wireless Router (2), ONT GPON AC1200 (1), PA6 (1), PA6 Wi-Fi Powerline Extender (3), PA202 (2), PW201A (2), RX9 Pro (2), RX9_Pro (3), TX3 (7), TX9 (2), TX9 Pro (4), Tenda A15 (1), Tenda AX12 (1), Tenda W30E (2), Tenda i22 (1), W6 (8), W6-S (6), W9 (13), W15E (2), W15EV1 (5), W18E (2), W20E (10), W30E (43), WH450 (1), i6 (6), i9 (9), i21 (5), i22 (9), i29 (10)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-04-178.88.5Tenda AC500 formSetVlanInfo memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32318
2024-04-178.88.5Tenda AC500 fromDhcpListClient memory corruptionNieznanyNot DefinedNot Defined0.000000.12CVE-2024-32316
2024-04-178.88.5Tenda AC10 formWanParameterSetting memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32317
2024-04-176.36.1Tenda AC500 formexeCommand privilege escalationNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32314
2024-04-178.88.5Tenda A18 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32305
2024-04-178.88.5Tenda AC500 formSetTimeZone memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32320
2024-04-178.88.5Tenda AC15 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.00CVE-2024-32303
2024-04-178.88.5Tenda AC500 setVlanInfo memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2023-46060
2024-04-178.88.5Tenda W30E formaddUserName memory corruptionNieznanyNot DefinedNot Defined0.000000.22CVE-2024-32285
2024-04-178.88.5Tenda FH1205 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.11CVE-2024-32307
2024-04-178.88.5Tenda W30E fromqossetting memory corruptionNieznanyNot DefinedNot Defined0.000000.12CVE-2024-32287
2024-04-178.88.5Tenda W30E fromVirtualSer memory corruptionNieznanyNot DefinedNot Defined0.000000.15CVE-2024-32286
2024-04-176.36.1Tenda W30E formexeCommand privilege escalationNieznanyNot DefinedNot Defined0.000000.04CVE-2024-32292
2024-04-178.88.5Tenda W30E fromAddressNat memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32290
2024-04-178.88.5Tenda W30E fromwebExcptypemanFilter memory corruptionNieznanyNot DefinedNot Defined0.000000.04CVE-2024-32288
2024-04-178.88.5Tenda W30E fromDhcpListClient memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32293
2024-04-178.88.5Tenda FH1203 formWanParameterSetting memory corruptionNieznanyNot DefinedNot Defined0.000000.04CVE-2024-32311
2024-04-178.88.5Tenda FH1203 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.04CVE-2024-32299
2024-04-178.88.5Tenda AC10U fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.04CVE-2024-32306
2024-04-176.36.1Tenda FH1203 formexeCommand privilege escalationNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32283
2024-04-178.88.5Tenda AC7 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32301
2024-04-176.36.1Tenda AC7 formexeCommand privilege escalationNieznanyNot DefinedNot Defined0.000000.08CVE-2024-32281
2024-04-178.88.5Tenda FH1202 formWanParameterSetting memory corruptionNieznanyNot DefinedNot Defined0.000000.23CVE-2024-32315
2024-04-178.88.5Tenda FH1202 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.15CVE-2024-32302
2024-04-176.36.1Tenda FH1202 formexeCommand privilege escalationNieznanyNot DefinedNot Defined0.000000.21CVE-2024-32282
2024-04-178.88.5Tenda F1203 formWanParameterSetting memory corruptionNieznanyNot DefinedNot Defined0.000000.15CVE-2024-32312
2024-04-178.88.5Tenda F1203 fromWizardHandle memory corruptionNieznanyNot DefinedNot Defined0.000000.11CVE-2024-32310
2024-04-178.88.5Tenda FH1205 formWanParameterSetting memory corruptionNieznanyNot DefinedNot Defined0.000000.19CVE-2024-32313
2024-04-178.88.5Tenda W30E fromNatlimit memory corruptionNieznanyNot DefinedNot Defined0.000000.16CVE-2024-32291
2024-04-178.88.0Tenda AC500 DhcpListClient fromDhcpListClient memory corruptionNieznanyProof-of-ConceptNot Defined0.000003.38-CVE-2024-3910
2024-04-178.88.0Tenda AC500 execCommand formexeCommand memory corruptionNieznanyProof-of-ConceptNot Defined0.000003.42-CVE-2024-3909
2024-04-176.35.7Tenda AC500 WriteFacMac formWriteFacMac privilege escalationNieznanyProof-of-ConceptNot Defined0.000002.92-CVE-2024-3908
2024-04-178.88.0Tenda AC500 setcfm formSetCfm memory corruptionNieznanyProof-of-ConceptNot Defined0.000003.21-CVE-2024-3907
2024-04-178.88.0Tenda AC500 QuickIndex formQuickIndex memory corruptionNieznanyProof-of-ConceptNot Defined0.000002.72-CVE-2024-3906
2024-04-178.88.0Tenda AC500 execCommand R7WebsSecurityHandler memory corruptionNieznanyProof-of-ConceptNot Defined0.000002.55-CVE-2024-3905
2024-04-168.88.0Tenda W30E fromRouteStatic memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.44CVE-2024-3882
2024-04-168.88.0Tenda W30E frmL7ProtForm frmL7PlotForm memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.31CVE-2024-3881
2024-04-166.35.7Tenda W30E WriteFacMac formWriteFacMac privilege escalationNieznanyProof-of-ConceptNot Defined0.000451.11CVE-2024-3880
2024-04-168.88.0Tenda W30E setcfm formSetCfm memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.15CVE-2024-3879
2024-04-168.88.0Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.16CVE-2024-3878
2024-04-168.88.0Tenda F1202 fromqossetting memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.19CVE-2024-3877
2024-04-168.88.0Tenda F1202 VirtualSer fromVirtualSer memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.15CVE-2024-3876
2024-04-168.88.0Tenda F1202 Natlimit fromNatlimit memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.11CVE-2024-3875
2024-04-168.88.0Tenda W20E SetRemoteWebManage formSetRemoteWebManage memory corruptionNieznanyProof-of-ConceptNot Defined0.000451.32CVE-2024-3874
2024-04-155.55.3Tenda AC15 fromDhcpListClient memory corruptionNieznanyNot DefinedNot Defined0.000430.00CVE-2024-30840
2024-04-055.55.3Tenda AC18 exeCommand privilege escalationNieznanyNot DefinedNot Defined0.000430.07CVE-2024-30891
2024-04-028.88.0Tenda AX1803 AdvSetMacMtuWan fromAdvSetMacMtuWan memory corruptionNieznanyProof-of-ConceptNot Defined0.000430.04CVE-2024-30621
2024-04-028.88.0Tenda AX1803 AdvSetMacMtuWan fromAdvSetMacMtuWan memory corruptionNieznanyProof-of-ConceptNot Defined0.000430.07CVE-2024-30620
2024-03-296.35.7Tenda AC15V1.0 setUsbUnload doSystemCmd privilege escalationNieznanyProof-of-ConceptNot Defined0.000430.03CVE-2024-30645
2024-03-298.88.0Tenda F1202 setcfm formSetCfm memory corruptionNieznanyProof-of-ConceptNot Defined0.000430.00CVE-2024-30635

971 więcej wpisów nie jest pokazywanych

Want to stay up to date on a daily basis?

Enable the mail alert feature now!