← Back

Tenda

tenda

1,840 CVEs • 218 products

Products (218)

Click to collapse
Toggle
Ac6 Firmware
ac6_firmware
Ac9 Firmware
ac9_firmware
Ac10 Firmware
ac10_firmware
Ac15 Firmware
ac15_firmware
Ac7 Firmware
ac7_firmware
W30e Firmware
w30e_firmware
Ac8 Firmware
ac8_firmware
Ax3 Firmware
ax3_firmware
M3 Firmware
m3_firmware
Ac5 Firmware
ac5_firmware
Ch22 Firmware
ch22_firmware
W15e Firmware
w15e_firmware
Ax12 Firmware
ax12_firmware
F453 Firmware
f453_firmware
Ac21 Firmware
ac21_firmware
Ac23 Firmware
ac23_firmware
G3 Firmware
g3_firmware
W20e Firmware
w20e_firmware
A15 Firmware
a15_firmware
F456 Firmware
f456_firmware
Ac20 Firmware
ac20_firmware
I21 Firmware
i21_firmware
W9 Firmware
w9_firmware
I22 Firmware
i22_firmware
Rx3 Firmware
rx3_firmware
O3 Firmware
o3_firmware
F451 Firmware
f451_firmware
W18e Firmware
w18e_firmware
Tx3 Firmware
tx3_firmware
I9 Firmware
i9_firmware
A18 Firmware
a18_firmware
Ax9 Firmware
ax9_firmware
F3 Firmware
f3_firmware
W6 S Firmware
w6-s_firmware
I29 Firmware
i29_firmware
Ac11 Firmware
ac11_firmware
I12 Firmware
i12_firmware
W6 Firmware
w6_firmware
W12 Firmware
w12_firmware
I3 Firmware
i3_firmware
Hg9 Firmware
hg9_firmware
Cp3 Firmware
cp3_firmware
I6 Firmware
i6_firmware
W3 Firmware
w3_firmware
I24 Firmware
i24_firmware
A21 Firmware
a21_firmware
G1 Firmware
g1_firmware
G103 Firmware
g103_firmware
Tx9 Firmware
tx9_firmware
O6 Firmware
o6_firmware
Hg10 Firmware
hg10_firmware
Hg3 Firmware
hg3_firmware
N301 Firmware
n301_firmware
N300 Firmware
n300_firmware
O1 Firmware
o1_firmware
A5s Firmware
a5s_firmware
A5s
a5s
A32 Firmware
a32_firmware
A32
a32
Hg6 Firmware
hg6_firmware
11n Firmware
11n_firmware
Ac23
ac23
Cp7 Firmware
cp7_firmware
Ac19 Firmware
ac19_firmware
A301 Firmware
a301_firmware
O5 Firmware
o5_firmware

CVEs (1,840)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1Ac21 Firmware
Nov 5, 2025
Nov 3, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow....Show more
A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.Show less
1Tenda
1Ac23 Firmware
Nov 5, 2025
Nov 2, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overf...Show more
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.Show less
1Tenda
1Ac23 Firmware
Feb 24, 2026
Nov 2, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible...Show more
A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.Show less
1Tenda
1Ax1803 Firmware
Nov 5, 2025
Oct 31, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafte...Show more
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.Show less
1Tenda
1Ax3 Firmware
Nov 5, 2025
Oct 31, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a c...Show more
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.Show less
1Tenda
1Ac8 Firmware
Dec 8, 2025
Oct 30, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. Executing a manipulation of the argument page can lead to buffer overflow. It...Show more
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. Executing a manipulation of the argument page can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.Show less
1Tenda
1Ch22 Firmware
Oct 28, 2025
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer...Show more
A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.Show less
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to buffer overflow....Show more
A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.Show less
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack ma...Show more
A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.Show less
1Tenda
1Ch22 Firmware
Oct 28, 2025
Oct 27, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched...Show more
A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.Show less
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitati...Show more
A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.Show less
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitat...Show more
A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.Show less
1Tenda
1Ch22 Firmware
Apr 29, 2026
Oct 27, 2025
7.3 HIGH· v4
8.0 HIGH· v3
7.7 HIGH· v2
A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must orig...Show more
A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.Show less
1Tenda
1Ch22 Firmware
Oct 27, 2025
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initi...Show more
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The atta...Show more
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.Show less
1Tenda
1Ch22 Firmware
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buff...Show more
A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.Show less
1Tenda
1Ac6 Firmware
Oct 28, 2025
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Request Handler. Such manipulation of the argument shareSpeed lea...Show more
A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Request Handler. Such manipulation of the argument shareSpeed leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Tenda
1O3 Firmware1.0.0.10(2478)
Feb 24, 2026
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer...Show more
A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.Show less
1Tenda
1O3 Firmware1.0.0.10(2478)
Oct 28, 2025
Oct 27, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanConfig. Such manipulation of the argument lan leads to stack-bas...Show more
A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanConfig. Such manipulation of the argument lan leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.Show less