Filtered by vendor Tenda
Subscribe
Total
1846 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-51846 | 1 Tenda | 2 Ac7, Ac7 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution. | |||||
| CVE-2026-51845 | 1 Tenda | 2 Ac7, Ac7 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter. | |||||
| CVE-2026-51844 | 1 Tenda | 2 Ac7, Ac7 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. | |||||
| CVE-2026-51843 | 1 Tenda | 2 Ac7, Ac7 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. | |||||
| CVE-2024-25343 | 1 Tenda | 2 N300, N300 Firmware | 2026-07-09 | N/A | 9.1 CRITICAL |
| Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords. | |||||
| CVE-2023-50992 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function. | |||||
| CVE-2023-50990 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function. | |||||
| CVE-2023-50989 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function. | |||||
| CVE-2023-50988 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function. | |||||
| CVE-2023-50987 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function. | |||||
| CVE-2023-50986 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function. | |||||
| CVE-2023-50985 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function. | |||||
| CVE-2023-50984 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function. | |||||
| CVE-2023-50983 | 1 Tenda | 2 I29, I29 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function. | |||||
| CVE-2023-48194 | 1 Tenda | 2 Ac8 Firmware, Ac8v4 | 2026-07-09 | N/A | 9.8 CRITICAL |
| Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained. | |||||
| CVE-2023-39786 | 1 Tenda | 2 Ac8 Firmware, Ac8v4 | 2026-07-09 | N/A | 7.5 HIGH |
| Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. | |||||
| CVE-2023-39785 | 1 Tenda | 2 Ac8 Firmware, Ac8v4 | 2026-07-09 | N/A | 7.5 HIGH |
| Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. | |||||
| CVE-2023-39784 | 1 Tenda | 2 Ac8 Firmware, Ac8v4 | 2026-07-09 | N/A | 7.5 HIGH |
| Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. | |||||
| CVE-2023-33530 | 1 Tenda | 2 G103, G103 Firmware | 2026-07-09 | N/A | 8.8 HIGH |
| There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges. | |||||
| CVE-2022-35201 | 1 Tenda | 2 Ac18, Ac18 Firmware | 2026-07-09 | N/A | 9.8 CRITICAL |
| Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. | |||||