Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:w9_firmware:1.0.0.7\(4456\)_cn:*:*:*:*:*:*:*

part: o version: 1.0.0.7(4456)_cn update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW9 Firmware (1b6003c6-986e-51c8-b968-6cab84250ee9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0537 vulnerable 2026-06-08 06:22:01.309857 Tenda W9 httpd setWrlBasicInfo stack-based overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrlBasicInfo of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250707. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-15T04:00:05.361Z
Updated: 2024-08-27T20:38:03.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51102 vulnerable 2026-06-08 06:16:17.251443 Details available
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
Published: 2023-12-26T00:00:00.000Z
Updated: 2024-08-02T22:32:09.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51101 vulnerable 2026-06-08 06:16:17.251001 Details available
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
Published: 2023-12-26T00:00:00.000Z
Updated: 2025-04-23T16:07:33.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51100 vulnerable 2026-06-08 06:16:17.250511 Details available
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .
Published: 2023-12-26T00:00:00.000Z
Updated: 2024-08-02T22:32:09.026Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51099 vulnerable 2026-06-08 06:16:17.250008 Details available
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
Published: 2023-12-26T00:00:00.000Z
Updated: 2024-08-02T22:32:08.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51098 vulnerable 2026-06-08 06:16:17.249699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51097 vulnerable 2026-06-08 06:16:17.248363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.