Approved changes feed: RSS · Atom

cpe:2.3:o:tendacn:ac10_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTendacn (911f347d-94dc-5fe9-b545-6a7f771d2f53)
ProductAc10 Firmware (2f48fc4c-ff6a-5b18-8907-7644408c8adc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16334 vulnerable 2026-06-03 14:38:20.344349 Details available
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.
Published: 2018-09-02T03:00:00.000Z
Updated: 2024-08-05T10:24:32.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14492 vulnerable 2026-06-03 14:38:12.143707 Details available
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
Published: 2018-07-21T12:00:00.000Z
Updated: 2024-09-16T18:18:05.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.