tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
Component: w18e_firmware

Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by s...

📅 2025-02-10
CVSS 8.0 Dossier →
Component: w18e_firmware

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenti...

📅 2025-02-10
CVSS 6.5 Dossier →
Component: w18e_firmware

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using...

📅 2025-02-10
CVSS 8.8 Dossier →
CVE-2025-0848 MEDIUM
Component: a18_firmware

A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function SetCmdlineRun of the file /go...

📅 2025-01-30
CVSS 6.5 Dossier →
Component: ac15_firmware

A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDe...

📅 2025-01-19
CVSS 8.8 Dossier →
Component: ac8_firmware

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown func...

📅 2025-01-17
CVSS 7.2 Dossier →
Component: ac8_firmware

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSched...

📅 2025-01-16
CVSS 8.8 Dossier →
CVE-2024-57703 CRITICAL
Component: ac8_firmware

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSched...

📅 2025-01-16
CVSS 9.8 Dossier →
Component: ac6_firmware

Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication vi...

📅 2025-01-16
CVSS 8.1 Dossier →
CVE-2024-57583 CRITICAL
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2024-57582 CRITICAL
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2024-57581 CRITICAL
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2024-57580 CRITICAL
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2024-57579 CRITICAL
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function....

📅 2025-01-16
CVSS 9.8 Dossier →
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function....

📅 2025-01-16
CVSS 8.8 Dossier →
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function....

📅 2025-01-16
CVSS 5.7 Dossier →
CVE-2024-57575 CRITICAL
Component: ac18_firmware

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function....

📅 2025-01-16
CVSS 9.8 Dossier →
CVE-2024-57483 CRITICAL
Component: i24_firmware

Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function....

📅 2025-01-14
CVSS 9.8 Dossier →
CVE-2025-22949 CRITICAL
Component: ac9_firmware

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution....

📅 2025-01-10
CVSS 9.8 Dossier →
CVE-2025-22946 CRITICAL
Component: ac9_firmware

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code exec...

📅 2025-01-10
CVSS 9.8 Dossier →
Component: ac6_firmware

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetP...

📅 2025-01-09
CVSS 8.8 Dossier →
CVE-2024-52275 CRITICAL
Component: ac6_firmware

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue af...

📅 2024-12-04
CVSS 9.8 Dossier →
CVE-2024-52274 CRITICAL
Component: ac6_firmware

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules...

📅 2024-12-04
CVSS 9.8 Dossier →
CVE-2024-52273 CRITICAL
Component: ac6_firmware

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) module...

📅 2024-12-04
CVSS 9.8 Dossier →
Page 31 of 77 (1,844 Total Records)