tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
Component: rx2_pro_firmware

Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an a...

📅 2025-05-01
CVSS 7.3 Dossier →
Component: rx2_pro_firmware

Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is autho...

📅 2025-05-01
CVSS 8.8 Dossier →
Component: w20e_firmware

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vul...

📅 2025-05-01
CVSS 6.3 Dossier →
Component: w20e_firmware

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerabili...

📅 2025-05-01
CVSS 6.3 Dossier →
Component: w20e_firmware

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerabil...

📅 2025-05-01
CVSS 6.3 Dossier →
Component: w20e_firmware

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerabil...

📅 2025-05-01
CVSS 6.3 Dossier →
Component: w12_firmware

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgid...

📅 2025-04-28
CVSS 8.8 Dossier →
CVE-2025-45429 CRITICAL
Component: ac9_firmware

In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remo...

📅 2025-04-23
CVSS 9.8 Dossier →
CVE-2025-45428 CRITICAL
Component: ac9_firmware

In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which ...

📅 2025-04-23
CVSS 9.8 Dossier →
CVE-2025-45427 CRITICAL
Component: ac9_firmware

In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead ...

📅 2025-04-23
CVSS 9.8 Dossier →
Component: w12_firmware

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUp...

📅 2025-04-19
CVSS 8.8 Dossier →
Component: w12_firmware

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysSched...

📅 2025-04-19
CVSS 8.8 Dossier →
Component: w12_firmware

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function ...

📅 2025-04-19
CVSS 8.8 Dossier →
Component: ac15_firmware

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the fil...

📅 2025-04-18
CVSS 8.8 Dossier →
Component: ac10_firmware

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2....

📅 2025-04-17
CVSS 7.5 Dossier →
Component: ac10_firmware

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2....

📅 2025-04-17
CVSS 7.5 Dossier →
Component: ac10_firmware

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2....

📅 2025-04-17
CVSS 7.5 Dossier →
Component: w12_firmware

A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin...

📅 2025-04-16
CVSS 8.8 Dossier →
Component: ac10_firmware

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2....

📅 2025-04-15
CVSS 4.6 Dossier →
Component: ac10_firmware

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2....

📅 2025-04-15
CVSS 4.6 Dossier →
CVE-2025-25456 CRITICAL
Component: ac10_firmware

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2....

📅 2025-04-15
CVSS 9.8 Dossier →
Component: ac7_firmware

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the fil...

📅 2025-04-07
CVSS 8.8 Dossier →
Component: ac1206_firmware

A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the ...

📅 2025-04-07
CVSS 8.8 Dossier →
Component: rx3_firmware

A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the f...

📅 2025-04-04
CVSS 8.8 Dossier →
Page 27 of 77 (1,844 Total Records)