tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
Component: ac10_firmware

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of...

📅 2025-12-17
CVSS 6.5 Dossier →
CVE-2025-67073 CRITICAL
Component: ac10_firmware

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of...

📅 2025-12-17
CVSS 9.8 Dossier →
CVE-2025-14665 CRITICAL
Component: wh450_firmware

A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpListClient of the component HTTP ...

📅 2025-12-14
CVSS 9.8 Dossier →
Component: ac20_firmware

A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation ...

📅 2025-12-14
CVSS 8.8 Dossier →
Component: ac20_firmware

A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoR...

📅 2025-12-14
CVSS 8.8 Dossier →
Component: ac20_firmware

A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList...

📅 2025-12-14
CVSS 8.8 Dossier →
Component: ax9_firmware

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results i...

📅 2025-12-13
CVSS 3.7 Dossier →
Component: ch22_firmware

A security flaw has been discovered in Tenda CH22 1.0.0.1. This affects the function frmL7ImForm of the file /goform/L7Im. Performing a manipulation o...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: ac9_firmware

A vulnerability was determined in Tenda AC9 15.03.05.14_multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/Downloa...

📅 2025-12-09
CVSS 5.3 Dossier →
Component: ax3_firmware

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code e...

📅 2025-12-08
CVSS 6.5 Dossier →
Component: ac21_firmware

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo....

📅 2025-11-20
CVSS 4.3 Dossier →
Component: ac21_firmware

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo....

📅 2025-11-20
CVSS 4.3 Dossier →
Component: ac21_firmware

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg....

📅 2025-11-20
CVSS 4.3 Dossier →
Component: ac21_firmware

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList....

📅 2025-11-20
CVSS 4.3 Dossier →
Component: ac21_firmware

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter....

📅 2025-11-20
CVSS 4.3 Dossier →
Component: ac21_firmware

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation ...

📅 2025-11-20
CVSS 8.8 Dossier →
Component: ac21_firmware

A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argume...

📅 2025-11-20
CVSS 8.8 Dossier →
Component: ch22_firmware

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulatio...

📅 2025-11-19
CVSS 8.8 Dossier →
Component: ch22_firmware

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. T...

📅 2025-11-17
CVSS 8.8 Dossier →
Component: ac20_firmware

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipu...

📅 2025-11-17
CVSS 8.8 Dossier →
CVE-2025-63666 CRITICAL
Component: ac15_firmware

Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suff...

📅 2025-11-12
CVSS 9.8 Dossier →
Component: ax3_firmware

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerabi...

📅 2025-11-10
CVSS 7.5 Dossier →
Component: ac18_firmware

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the guestSsid parameter of th...

📅 2025-11-10
CVSS 8.8 Dossier →
Component: ac18_firmware

A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the ssid parameter of t...

📅 2025-11-10
CVSS 5.4 Dossier →
Page 14 of 77 (1,844 Total Records)