Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:i12_firmware:1.0.0.6\(2204\):*:*:*:*:*:*:*

part: o version: 1.0.0.6(2204) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductI12 Firmware (5c70562e-8639-5548-80b8-c41b542f87a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4043 vulnerable 2026-06-08 08:05:12.524016 Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow
HIGH (8.8)
A security vulnerability has been detected in Tenda i12 1.0.0.6(2204). The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-03-12T15:32:09.959Z
Updated: 2026-03-12T15:45:09.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4042 vulnerable 2026-06-08 08:05:12.523364 Tenda i12 WifiMacFilterGet formWifiMacFilterGet stack-based overflow
HIGH (8.8)
A weakness has been identified in Tenda i12 1.0.0.6(2204). The affected element is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. This manipulation of the argument index causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-12T15:02:14.132Z
Updated: 2026-03-12T15:34:00.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4041 vulnerable 2026-06-08 08:05:12.522095 Tenda i12 exeCommand vos_strcpy stack-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda i12 1.0.0.6(2204). Impacted is the function vos_strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-12T15:02:10.303Z
Updated: 2026-03-12T15:34:55.150Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.