Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Total 1346 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-41480 1 Tenda 2 Ac6, Ac6v2.0 Firmware 2025-05-15 N/A 7.5 HIGH
Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x475dc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-4368 1 Tenda 2 Ac8, Ac8 Firmware 2025-05-13 9.0 HIGH 8.8 HIGH
A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetRouterStatus of the file /goform/MtuSetMacWan. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-42060 1 Tenda 2 W15e, W15e Firmware 2025-05-13 N/A 7.5 HIGH
Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
CVE-2025-4298 1 Tenda 2 Ac1206, Ac1206 Firmware 2025-05-13 9.0 HIGH 8.8 HIGH
A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4299 1 Tenda 2 Ac1206, Ac1206 Firmware 2025-05-13 9.0 HIGH 8.8 HIGH
A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-42166 1 Tenda 2 Ac10, Ac10 Firmware 2025-05-13 N/A 9.8 CRITICAL
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
CVE-2022-42165 1 Tenda 2 Ac10, Ac10 Firmware 2025-05-13 N/A 9.8 CRITICAL
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
CVE-2022-43260 1 Tenda 2 Ac18, Ac18 Firmware 2025-05-12 N/A 9.8 CRITICAL
Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVE-2022-43259 1 Tenda 2 Ac15, Ac15 Firmware 2025-05-12 N/A 7.5 HIGH
Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.
CVE-2022-43026 1 Tenda 2 Tx3, Tx3 Firmware 2025-05-09 N/A 9.8 CRITICAL
Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg.
CVE-2022-43025 1 Tenda 2 Tx3, Tx3 Firmware 2025-05-09 N/A 9.8 CRITICAL
Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg.
CVE-2022-43024 1 Tenda 2 Tx3, Tx3 Firmware 2025-05-09 N/A 9.8 CRITICAL
Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2022-43029 1 Tenda 2 Tx3, Tx3 Firmware 2025-05-08 N/A 9.8 CRITICAL
Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg.
CVE-2022-43028 1 Tenda 2 Tx3, Tx3 Firmware 2025-05-08 N/A 9.8 CRITICAL
Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg.
CVE-2022-43027 1 Tenda 2 Tx3, Tx3 Firmware 2025-05-08 N/A 9.8 CRITICAL
Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the firewallEn parameter at /goform/SetFirewallCfg.
CVE-2025-28221 1 Tenda 2 W6-s, W6-s Firmware 2025-05-08 N/A 7.5 HIGH
Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request.
CVE-2022-42233 1 Tenda 2 11n, 11n Firmware 2025-05-08 N/A 9.8 CRITICAL
Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.
CVE-2025-25662 1 Tenda 2 O4, O4 Firmware 2025-05-07 N/A 9.8 CRITICAL
Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time.
CVE-2022-40876 1 Tenda 2 Ax1803, Ax1803 Firmware 2025-05-07 N/A 9.8 CRITICAL
In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).
CVE-2022-40875 1 Tenda 2 Ax1803, Ax1803 Firmware 2025-05-07 N/A 7.5 HIGH
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function GetParentControlInfo.