tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
Component: ac8_firmware

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMac...

📅 2025-03-03
CVSS 8.8 Dossier →
Component: ac7_firmware

A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file ...

📅 2025-03-03
CVSS 8.8 Dossier →
CVE-2025-1819 MEDIUM
Component: ac7_firmware

A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/...

📅 2025-03-02
CVSS 6.3 Dossier →
Component: ac6_firmware

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of th...

📅 2025-03-02
CVSS 8.8 Dossier →
Component: ac8_firmware

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function....

📅 2025-02-21
CVSS 6.5 Dossier →
Component: ac6_firmware

There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command executio...

📅 2025-02-21
CVSS 6.5 Dossier →
Component: ac6_firmware

Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function....

📅 2025-02-21
CVSS 6.5 Dossier →
Component: i12_firmware

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function....

📅 2025-02-20
CVSS 8.0 Dossier →
CVE-2025-25678 CRITICAL
Component: i12_firmware

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function....

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25676 CRITICAL
Component: i12_firmware

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function....

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25675 CRITICAL
Component: ac10_firmware

Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput par...

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25674 CRITICAL
Component: ac10_firmware

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid....

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25668 CRITICAL
Component: ac8_firmware

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function....

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25667 CRITICAL
Component: ac8_firmware

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info....

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25664 CRITICAL
Component: ac8_firmware

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function....

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25663 CRITICAL
Component: ac8_firmware

A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the...

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25662 CRITICAL
Component: o4_firmware

Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument ...

📅 2025-02-20
CVSS 9.8 Dossier →
CVE-2025-25343 CRITICAL
Component: ac6_firmware

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function....

📅 2025-02-12
CVSS 9.8 Dossier →
Component: w18e_firmware

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to...

📅 2025-02-10
CVSS 6.5 Dossier →
Component: w18e_firmware

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service...

📅 2025-02-10
CVSS 8.3 Dossier →
Component: w18e_firmware

A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of s...

📅 2025-02-10
CVSS 8.0 Dossier →
Component: w18e_firmware

Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administr...

📅 2025-02-10
CVSS 8.8 Dossier →
Component: w18e_firmware

A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using t...

📅 2025-02-10
CVSS 8.8 Dossier →
Component: w18e_firmware

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWi...

📅 2025-02-10
CVSS 8.8 Dossier →
Page 30 of 77 (1,844 Total Records)