tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
CVE-2025-9523 CRITICAL
Component: ac1206_firmware

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The ...

📅 2025-08-27
CVSS 9.8 Dossier →
Component: ch22_firmware

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing mani...

📅 2025-08-26
CVSS 8.8 Dossier →
CVE-2025-55613 CRITICAL
Component: o3_firmware

Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter....

📅 2025-08-22
CVSS 9.8 Dossier →
Component: ax3_firmware

Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter....

📅 2025-08-22
CVSS 7.5 Dossier →
Component: ax3_firmware

Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter....

📅 2025-08-22
CVSS 7.5 Dossier →
Component: ax3_firmware

Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter....

📅 2025-08-22
CVSS 7.5 Dossier →
Component: ac10_firmware

A vulnerability was found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /etc_ro/shadow of the component MD5 Hash Handler. Per...

📅 2025-08-21
CVSS 2.5 Dossier →
Component: ac15_firmware

Tenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function....

📅 2025-08-21
CVSS 7.5 Dossier →
Component: m3_firmware

A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /gof...

📅 2025-08-21
CVSS 8.8 Dossier →
Component: m3_firmware

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argu...

📅 2025-08-21
CVSS 8.8 Dossier →
Component: i22_firmware

A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing ...

📅 2025-08-21
CVSS 8.8 Dossier →
Component: ac6_firmware

Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function....

📅 2025-08-20
CVSS 7.5 Dossier →
Component: ac6_firmware

Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function....

📅 2025-08-20
CVSS 7.5 Dossier →
Component: ac6_firmware

Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function....

📅 2025-08-20
CVSS 7.3 Dossier →
Component: ac6_firmware

Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function....

📅 2025-08-20
CVSS 6.5 Dossier →
Component: ac6_firmware

Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList....

📅 2025-08-20
CVSS 7.5 Dossier →
Component: ac6_firmware

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response c...

📅 2025-08-20
CVSS 8.1 Dossier →
Component: ac6_firmware

A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicio...

📅 2025-08-20
CVSS 7.2 Dossier →
Component: ac6_firmware

A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP ...

📅 2025-08-20
CVSS 8.6 Dossier →
CVE-2025-27129 CRITICAL
Component: ac6_firmware

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP reque...

📅 2025-08-20
CVSS 9.8 Dossier →
Component: ac6_firmware

An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafted network ...

📅 2025-08-20
CVSS 7.5 Dossier →
Component: ac6_firmware

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially c...

📅 2025-08-20
CVSS 8.1 Dossier →
Component: ac20_firmware

A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etc_ro/shadow. ...

📅 2025-08-17
CVSS 2.5 Dossier →
CVE-2025-9090 MEDIUM
Component: ac20_firmware

A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet S...

📅 2025-08-17
CVSS 6.3 Dossier →
Page 20 of 77 (1,844 Total Records)