Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ax1803:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAx1803 (6dda4d23-4529-58b3-aa9c-d13f7e5324ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7598 vulnerable 2026-06-08 07:45:17.740064 Tenda AX1803 setWifiFilterCfg formSetWifiMacFilterCfg stack-based overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-14T11:02:07.422Z
Updated: 2025-07-14T12:43:01.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7597 vulnerable 2026-06-08 07:45:17.737628 Tenda AX1803 setMacFilterCfg formSetMacFilterCfg stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-14T10:44:06.851Z
Updated: 2025-07-14T12:46:49.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4236 vulnerable 2026-06-08 06:50:17.277586 Tenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /goform/SetDDNSCfg. The manipulation of the argument serverName/ddnsUser/ddnsPwd/ddnsDomain leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262127. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-26T17:31:09.607Z
Updated: 2024-08-01T20:33:52.983Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.