Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:4g300:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
Product4G300 (deba646a-9740-5845-a14e-a3a74c070107)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7470 not_vulnerable 2026-06-08 08:08:57.278416 Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-04-30T02:30:13.346Z
Updated: 2026-05-04T13:22:41.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7469 not_vulnerable 2026-06-08 08:08:57.276362 Tenda 4G300 DelFil sub_425A28 command injection
MEDIUM (6.3)
A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-04-30T01:45:10.912Z
Updated: 2026-04-30T13:44:18.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4170 not_vulnerable 2026-06-08 06:50:17.143938 Tenda 4G300 sub_429A30 stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This issue affects the function sub_429A30. The manipulation of the argument list1 leads to stack-based buffer overflow. The attack may be initiated remotely. The identifier VDB-261989 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-25T13:00:06.597Z
Updated: 2024-08-01T20:33:52.721Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4169 not_vulnerable 2026-06-08 06:50:17.143465 Tenda 4G300 sub_4279CC stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the function sub_42775C/sub_4279CC. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this vulnerability is VDB-261988. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-25T12:31:04.756Z
Updated: 2024-08-01T20:33:52.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4169 vulnerable 2026-06-08 06:50:17.143273 Tenda 4G300 sub_4279CC stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the function sub_42775C/sub_4279CC. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this vulnerability is VDB-261988. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-25T12:31:04.756Z
Updated: 2024-08-01T20:33:52.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4168 not_vulnerable 2026-06-08 06:50:17.142866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4168 vulnerable 2026-06-08 06:50:17.142784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4167 not_vulnerable 2026-06-08 06:50:17.142250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4167 vulnerable 2026-06-08 06:50:17.142147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4166 not_vulnerable 2026-06-08 06:50:17.141503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38929 not_vulnerable 2026-06-08 06:08:19.178219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38929 vulnerable 2026-06-08 06:08:19.176742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37723 not_vulnerable 2026-06-08 06:08:15.925826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37722 not_vulnerable 2026-06-08 06:08:15.924787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37721 not_vulnerable 2026-06-08 06:08:15.923414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37718 not_vulnerable 2026-06-08 06:08:15.918853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.