Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:i12_firmware:1.0.0.11\(3862\):*:*:*:*:*:*:*

part: o version: 1.0.0.11(3862) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductI12 Firmware (5c70562e-8639-5548-80b8-c41b542f87a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5849 vulnerable 2026-06-08 08:07:04.167189 Tenda i12 HTTP path traversal
HIGH (7.3)
A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown function of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-09T05:30:15.755Z
Updated: 2026-04-09T13:18:58.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5609 vulnerable 2026-06-08 08:07:03.899320 Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component Parameter Handler. This manipulation of the argument index/wl_radio causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Published: 2026-04-06T01:15:13.183Z
Updated: 2026-04-06T18:21:17.706Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.