I29 Firmware (Tenda) - vulnerabilities (CVEs)

10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-01-05. Vendor: Tenda.

CVEs of I29 Firmware

• CVE-2023-50991 - CVSS 7.5 (high), 2024-01-05: Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp…
• CVE-2023-50988 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
• CVE-2023-50992 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.
• CVE-2023-50990 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
• CVE-2023-50989 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
• CVE-2023-50985 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.
• CVE-2023-50984 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function.
• CVE-2023-50987 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.
• CVE-2023-50983 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function.
• CVE-2023-50986 - CVSS 9.8 (critical), 2023-12-20: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.