W9 Firmware (Tenda) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-11-19. Vendor: Tenda.
CVEs of W9 Firmware
- CVE-2024-52788 - CVSS 8 (high), 2024-11-19: Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.
- CVE-2024-4244 - CVSS 8.8 (high), 2024-04-26: A vulnerability classified as critical was found in Tenda W9 1.0.0.7(4456). Affected by this vulnerability is the function fromDhcpSetSer of the file…
- CVE-2024-4243 - CVSS 8.8 (high), 2024-04-26: A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The…
- CVE-2024-4242 - CVSS 8.8 (high), 2024-04-26: A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. This issue affects the function formwrlSSIDget of the file…
- CVE-2024-4241 - CVSS 8.8 (high), 2024-04-26: A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. This vulnerability affects the function formQosManageDouble_auto. The…
- CVE-2024-4240 - CVSS 8.8 (high), 2024-04-26: A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. This affects the function formQosManageDouble_user. The manipulation…
- CVE-2024-0542 - CVSS 9.8 (critical), 2024-01-15: A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the…
- CVE-2024-0539 - CVSS 9.8 (critical), 2024-01-15: A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosManage_user of the component httpd. The…
- CVE-2024-0541 - CVSS 9.8 (critical), 2024-01-15: A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is the function formAddSysLogRule of the…
- CVE-2024-0540 - CVSS 9.8 (critical), 2024-01-15: A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The…
- CVE-2024-0538 - CVSS 9.8 (critical), 2024-01-15: A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the…
- CVE-2024-0537 - CVSS 9.8 (critical), 2024-01-15: A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrlBasicInfo of the component httpd. The…
- CVE-2024-0536 - CVSS 9.8 (critical), 2024-01-15: A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is the function setWrlAccessList of the…
- CVE-2023-51099 - CVSS 9.8 (critical), 2023-12-26: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
- CVE-2023-51102 - CVSS 9.8 (critical), 2023-12-26: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
- CVE-2023-51098 - CVSS 9.8 (critical), 2023-12-26: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .
- CVE-2023-51101 - CVSS 9.8 (critical), 2023-12-26: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
- CVE-2023-51097 - CVSS 9.8 (critical), 2023-12-26: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
- CVE-2023-51100 - CVSS 9.8 (critical), 2023-12-26: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .
