-
Tenda I25V2.0 V1.0.0.1(5674): httpd goform ping/traceroute tracerouteIp OS Command Injection (Authenticated, Root RCE)
-
Tenda F6 V5.0 V12.02.01.64: httpd goform setWizard Unauthenticated WiFi Configuration Modification (Pre-Auth, Config Tampering)
-
Tenda F6 V5.0 V12.02.01.64: httpd goform Sensitive Interfaces Unauthenticated Information Disclosure (Pre-Auth, WiFi Password and PPPoE Credential Exposure)
-
Tenda AC10 V16.03.10.13: httpd setMacFilterCfg deviceList Stack Buffer Overflow (Unauthenticated, Remote DoS)
-
Tenda AC10 V16.03.10.13: httpd SetFirewallCfg firewallEn Stack Buffer Overflow (Unauthenticated, Remote DoS)
-
Tenda AC10 V16.03.10.13: httpd saveParentControlInfo urls Stack Buffer Overflow (Unauthenticated, Remote DoS)
-
Tenda AC10 V16.03.10.13: httpd openSchedWifi schedStartTime Stack Buffer Overflow (Unauthenticated, Remote DoS)
-
Tenda N6P-16H V12.1.5.16: Kylin WritePppConfig PPPoE Account Name OS Command Injection (Authenticated, Root RCE)
-
Ruijie RSR830 RGOS 12.6(4)B1813: eweb CWMP Upload Arbitrary File Write (Unauthenticated, Root RCE)
-
Ruijie RSR830 RGOS 12.6(4)B1813: eweb CwmpController Download Interface Unauthenticated File Read (Pre-Auth, Sensitive File Disclosure)