Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:a301:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductA301 (0ce91206-3fd6-55e0-9490-71953bc2499a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7581 vulnerable 2026-06-08 06:58:22.749545 Tenda A301 WifiBasicSet formWifiBasicSet stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda A301 15.13.08.12. This affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-07T15:00:09.496Z
Updated: 2024-08-07T15:40:44.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6403 vulnerable 2026-06-08 06:58:19.349719 Tenda A301 SetOnlineDevName formWifiBasicSet stack-based overflow
MEDIUM (6.5)
A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269948. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-28T17:00:07.083Z
Updated: 2024-08-01T21:41:03.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6402 vulnerable 2026-06-08 06:58:19.348779 Tenda A301 SetOnlineDevName fromSetWirelessRepeat stack-based overflow
MEDIUM (6.5)
A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269947. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-28T17:00:05.443Z
Updated: 2024-08-01T21:41:03.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6189 vulnerable 2026-06-08 06:58:18.113628 Tenda A301 WifiExtraSet fromSetWirelessRepeat stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-20T14:00:05.817Z
Updated: 2024-08-01T21:33:05.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4291 vulnerable 2026-06-08 06:50:17.444104 Tenda A301 setBlackRule formAddMacfilterRule stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule of the file /goform/setBlackRule. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262223. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-27T20:00:07.538Z
Updated: 2025-08-27T21:26:06.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.