Tenda i29 Firmware vulnerabilities

10 CVEs affecting Tenda i29 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-50991, published 2024-01-05.

More from Tenda.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-50991, published 2024-01-05. High severity, CVSS 7.5. EPSS: 8.8% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function.
• CVE-2023-50989, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
• CVE-2023-50983, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function.
• CVE-2023-50992, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.
• CVE-2023-50990, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
• CVE-2023-50988, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
• CVE-2023-50987, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.
• CVE-2023-50986, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.
• CVE-2023-50985, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.
• CVE-2023-50984, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function.