Tenda o6 Firmware vulnerabilities

4 CVEs affecting Tenda o6 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-46049, published 2024-09-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8230, published 2024-08-28. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the…
CVE-2024-8229, published 2024-08-28. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been declared as critical. This vulnerability affects the function frommacFilterModify of the file /goform/operateMacFilter. The…
CVE-2024-8231, published 2024-08-28. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet of the file /goform/setPortForward. The manipulation of the argument…
CVE-2024-46049, published 2024-09-13. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.