Approved changes feed: RSS · Atom

cpe:2.3:o:tendacn:ac10u_firmware:15.03.06.49_multi_tde01:*:*:*:*:*:*:*

part: o version: 15.03.06.49_multi_tde01 update: *

VendorTendacn (911f347d-94dc-5fe9-b545-6a7f771d2f53)
ProductAc10U Firmware (5b7ac22b-c6ae-5693-b50c-b501ae74ca79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0932 vulnerable 2026-06-08 06:22:03.163071 Tenda AC10U setSmartPowerManagement stack-based overflow
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This issue affects the function setSmartPowerManagement. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252137 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-26T16:31:04.983Z
Updated: 2024-11-13T14:56:09.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0931 vulnerable 2026-06-08 06:22:03.162331 Tenda AC10U saveParentControlInfo stack-based overflow
MEDIUM (4.7)
A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. This vulnerability affects the function saveParentControlInfo. The manipulation of the argument deviceId/time/urls leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252136. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-26T16:31:03.937Z
Updated: 2025-06-03T17:56:01.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0930 vulnerable 2026-06-08 06:22:03.161677 Tenda AC10U fromSetWirelessRepeat stack-based overflow
MEDIUM (4.7)
A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252135. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-26T16:00:07.582Z
Updated: 2024-09-12T18:28:00.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0929 vulnerable 2026-06-08 06:22:03.160974 Tenda AC10U fromNatStaticSetting stack-based overflow
MEDIUM (4.7)
A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been rated as critical. Affected by this issue is the function fromNatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252134 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-26T16:00:06.481Z
Updated: 2025-05-29T15:12:42.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0928 vulnerable 2026-06-08 06:22:03.160402 Tenda AC10U fromDhcpListClient stack-based overflow
MEDIUM (4.7)
A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been declared as critical. Affected by this vulnerability is the function fromDhcpListClient. The manipulation of the argument page/listN leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252133 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-26T15:31:03.551Z
Updated: 2025-06-17T21:19:31.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0927 vulnerable 2026-06-08 06:22:03.151796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0926 vulnerable 2026-06-08 06:22:03.151274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0925 vulnerable 2026-06-08 06:22:03.150522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0923 vulnerable 2026-06-08 06:22:03.146932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0922 vulnerable 2026-06-08 06:22:03.145358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44023 vulnerable 2026-06-08 06:12:38.239895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44022 vulnerable 2026-06-08 06:12:38.239507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44021 vulnerable 2026-06-08 06:12:38.238996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44020 vulnerable 2026-06-08 06:12:38.238399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44019 vulnerable 2026-06-08 06:12:38.233602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44018 vulnerable 2026-06-08 06:12:38.233083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44017 vulnerable 2026-06-08 06:12:38.232392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44016 vulnerable 2026-06-08 06:12:38.231643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44015 vulnerable 2026-06-08 06:12:38.231092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44014 vulnerable 2026-06-08 06:12:38.230511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44013 vulnerable 2026-06-08 06:12:38.229011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.