GCVE - cpe:2.3:o:tenda:ax1803_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ax1803_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ax1803 Firmware (`2ae220e7-d970-5d2e-a843-b32f51bea764`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-1329`	vulnerable	2026-06-08 07:49:08.280868	Tenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflow HIGH (8.8) A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used. Published: 2026-01-22T14:32:18.996Z Updated: 2026-02-23T08:53:35.403Z Open on db.gcve.eu Reference links https://vuldb.com/?id.342305 https://vuldb.com/?ctiid.342305 https://vuldb.com/?submit.736063 https://vuldb.com/?submit.736064 https://vuldb.com/?submit.736065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-30621`	vulnerable	2026-06-08 06:35:30.622450	Details available Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan. Published: 2024-04-02T00:00:00.000Z Updated: 2024-08-19T19:24:45.965Z Open on db.gcve.eu Reference links https://github.com/re1wn/IoT_vuln/blob/main/Tenda_AX1803_v1.0.0.1_contains_a_stack_overflow_via_the_serverName_parameter_in_the_function_fromAdvSetMacMtuWan.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-45781`	vulnerable	2026-06-08 05:50:36.672206	Details available Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName. Published: 2023-11-14T00:00:00.000Z Updated: 2024-09-03T17:13:00.707Z Open on db.gcve.eu Reference links https://www.cnblogs.com/FALL3N/p/16813932.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.