Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac15_firmware:15.03.05.20_multi_tde01:*:*:*:*:*:*:*

part: o version: 15.03.05.20_multi_tde01 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc15 Firmware (105cfbfb-620c-539b-aaae-5b83f9b563c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28557 vulnerable 2026-06-08 05:42:44.602037 Details available
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution
Published: 2022-05-04T15:18:42.000Z
Updated: 2024-08-03T05:56:15.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28556 vulnerable 2026-06-08 05:42:44.600935 Details available
Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971
Published: 2022-05-04T15:13:19.000Z
Updated: 2024-08-03T05:56:15.568Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.