AF
Product
Ax1806 Firmware
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 39Medium 2Low 0
Watch
Add Ax1806 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-44557 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo Affected: 1.0.0.1 |
| CVE-2024-44555 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo Affected: 1.0.0.1 |
| CVE-2024-44553 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv Affected: 1.0.0.1 |
| CVE-2024-44552 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv Affected: 1.0.0.1 |
| CVE-2024-44551 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv Affected: 1.0.0.1 |
| CVE-2024-44550 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv Affected: 1.0.0.1 |
| CVE-2024-44549 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv Affected: 1.0.0.1 |
| CVE-2024-44558 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo Affected: 1.0.0.1 |
| CVE-2024-44556 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo Affected: 1.0.0.1 |
| CVE-2024-44565 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set Affected: 1.0.0.1 |
| CVE-2024-44563 | 9.8 | Aug 26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo Affected: 1.0.0.1 |
| CVE-2024-40416 | 9.8 | Jul 15 | A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow Affected: 1.0.0.1 |
| CVE-2024-40415 | 9.8 | Jul 15 | A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow Affected: 1.0.0.1 |
| CVE-2024-40414 | 9.8 | Jul 15 | A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow Affected: 1.0.0.1 |
| CVE-2024-35580 | 9.8 | May 20 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv Affected: 1.0.0.1 |
| CVE-2024-35571 | 9.8 | May 20 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv Affected: 1.0.0.1 |
| CVE-2022-34597 | 9.8 | Jul 6 | Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting Affected: 1.0.0.1 |
| CVE-2022-32032 | 9.8 | Jul 1 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule Affected: 1.0.0.1 |
| CVE-2023-47456 | 9.1 | Nov 7 | Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat Affected: 1.0.0.1 |
| CVE-2023-47455 | 9.1 | Nov 7 | Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime… Affected: 1.0.0.1 |
| CVE-2024-4239 | 8.8 | Apr 26 | A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical Affected: 1.0.0.1 |
| CVE-2024-4238 | 8.8 | Apr 26 | A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical Affected: 1.0.0.1 |
| CVE-2024-4237 | 8.8 | Apr 26 | A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1 Affected: 1.0.0.1 |
| CVE-2022-28572 | 8.8 | May 2 | Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function Affected: 1.0.0.1 |
| CVE-2024-35578 | 8.0 | May 20 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv Affected: 1.0.0.1 |
| CVE-2024-35579 | 7.7 | May 20 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv Affected: 1.0.0.1 |
| CVE-2025-70644 | 7.5 | Jan 21 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function Affected: 1.0.0.1 |
| CVE-2025-70650 | 7.5 | Jan 21 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function Affected: 1.0.0.1 |
| CVE-2025-70645 | 7.5 | Jan 21 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function Affected: 1.0.0.1 |
| CVE-2025-71020 | 7.5 | Jan 16 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function Affected: 1.0.0.1 |
| CVE-2025-70746 | 7.5 | Jan 16 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function Affected: 1.0.0.1 |
| CVE-2025-70656 | 7.5 | Jan 15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function Affected: 1.0.0.1 |
| CVE-2025-71019 | 7.5 | Jan 15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function Affected: 1.0.0.1 |
| CVE-2025-70744 | 7.5 | Jan 15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function Affected: 1.0.0.1 |
| CVE-2025-71021 | 7.5 | Jan 14 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function Affected: 1.0.0.1 |
| CVE-2025-70747 | 7.5 | Jan 14 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function Affected: 1.0.0.1 |
| CVE-2025-70753 | 7.5 | Jan 13 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function Affected: 1.0.0.1 |
| CVE-2024-41492 | 7.5 | Jul 19 | A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input Affected: 1.0.0.1 |
| CVE-2022-32033 | 7.5 | Jul 1 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer Affected: 1.0.0.1 |
| CVE-2022-32031 | 7.5 | Jul 1 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic Affected: 1.0.0.1 |
| CVE-2022-32030 | 7.5 | Jul 1 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand Affected: 1.0.0.1 |
| CVE-2022-28973 | 7.5 | May 6 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan Affected: 1.0.0.1 |
| CVE-2022-28972 | 7.5 | May 6 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set Affected: 1.0.0.1 |
| CVE-2022-28971 | 7.5 | May 6 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind Affected: 1.0.0.1 |
| CVE-2022-28970 | 7.5 | May 6 | Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo Affected: 1.0.0.1 |
| CVE-2022-28969 | 7.5 | May 6 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic Affected: 1.0.0.1 |
| CVE-2022-25566 | 7.5 | Mar 10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo Affected: 1.0.0.1 |
| CVE-2022-25558 | 7.5 | Mar 10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince Affected: 1.0.0.1 |
| CVE-2022-25557 | 7.5 | Mar 10 | Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo Affected: 1.0.0.1 |
| CVE-2022-25555 | 7.5 | Mar 10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime Affected: 1.0.0.1 |
