U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): firmware
  • Search Type: Search All
There are 4,385 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2024-31616

An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(07150910) allows attackers to execute arbitrary code via the common_quick_config.lua file.

Published: April 23, 2024; 6:15:07 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-22807

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to erase a critical sector of the flash memory, causing the machine to lose network connectivity and suffer from firmware corruption.

Published: April 22, 2024; 8:15:07 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32320

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.

Published: April 17, 2024; 12:15:09 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32318

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.

Published: April 17, 2024; 12:15:09 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32317

Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

Published: April 17, 2024; 12:15:09 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32316

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.

Published: April 17, 2024; 12:15:09 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32314

Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

Published: April 17, 2024; 12:15:08 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32305

Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

Published: April 17, 2024; 12:15:08 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32303

Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

Published: April 17, 2024; 12:15:08 PM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32315

Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32311

Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32306

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32302

Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32299

Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32293

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32292

Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32291

Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function.

Published: April 17, 2024; 10:15:09 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32290

Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function.

Published: April 17, 2024; 10:15:08 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32288

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function.

Published: April 17, 2024; 10:15:08 AM -0400 		V3.x:(not available)
 V2.0:(not available)
CVE-2024-32287

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function.

Published: April 17, 2024; 10:15:08 AM -0400 		V3.x:(not available)
 V2.0:(not available)