VendorsTendai9_firmwareall versions
Vulnerabilities

Tenda i9 Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2022-40100
Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function.
Published 2022-09-23 · Modified
9.8EPSS 0.016
CVE-2024-0996
Tenda i9 httpd setcfm formSetCfm stack-based overflow
Published 2024-01-29 · Modified
9.8EPSS 0.016
CVE-2026-7036
Tenda i9 HTTP R7WebsSecurityHandlerfunction path traversal
Published 2026-04-26 · Analyzed
9.8EPSS 0.008
CVE-2024-11650
Tenda i9 GetIPTV websReadEvent null pointer dereference
Published 2024-11-25 · Analyzed
7.5EPSS 0.013
CVE-2022-40107
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
7.5EPSS 0.011
CVE-2022-40106
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
7.5EPSS 0.010
CVE-2022-40101
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
7.5EPSS 0.009
CVE-2022-40105
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
7.5EPSS 0.009
CVE-2022-40102
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
7.5EPSS 0.009
CVE-2022-40104
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
7.5EPSS 0.009
CVE-2022-40103
Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
Published 2022-09-23 · Modified
5.5EPSS 0.003