Tenda AC9 Firmware 15.03.06.42_Multi
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac9_firmware:15.03.06.42_multi:*:*:*:*:*:*:*
part: o version: 15.03.06.42_multi update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac9 Firmware (64d7a677-fdf1-5f2a-aab2-91a7c6277c52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2191 |
vulnerable | 2026-06-08 07:55:16.696043 |
Tenda AC9 formGetDdosDefenceList stack-based overflow
HIGH (7.2)
A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-02-08T22:32:10.488Z
Updated: 2026-02-23T09:50:50.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44877 |
vulnerable | 2026-06-08 07:25:10.866996 |
Details available
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-02T00:00:00.000Z
Updated: 2025-05-06T15:16:43.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44872 |
vulnerable | 2026-06-08 07:25:10.865120 |
Details available
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-02T00:00:00.000Z
Updated: 2025-05-06T15:17:45.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25751 |
vulnerable | 2026-06-08 06:31:23.844979 |
Details available
A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetSysTime function.
Published: 2024-02-26T00:00:00.000Z
Updated: 2024-08-27T19:00:23.880Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24543 |
vulnerable | 2026-06-08 06:29:41.458072 |
Details available
Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker to cause a denial of service or run arbitrary code via crafted overflow data.
Published: 2024-02-05T00:00:00.000Z
Updated: 2025-05-15T19:47:57.882Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41563 |
vulnerable | 2026-06-08 06:11:06.200503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41562 |
vulnerable | 2026-06-08 06:11:06.194361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41561 |
vulnerable | 2026-06-08 06:11:06.192628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41560 |
vulnerable | 2026-06-08 06:11:06.189855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41559 |
vulnerable | 2026-06-08 06:11:06.188707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38937 |
vulnerable | 2026-06-08 06:09:35.556712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38936 |
vulnerable | 2026-06-08 06:09:35.542492 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38935 |
vulnerable | 2026-06-08 06:08:19.219496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38933 |
vulnerable | 2026-06-08 06:08:19.217066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38930 |
vulnerable | 2026-06-08 06:08:19.193617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42659 |
vulnerable | 2026-06-08 05:35:22.426617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26728 |
vulnerable | 2026-06-08 05:23:51.463572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.