Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

19 records in Ac10u Firmware · all components

TI-2024-00852 CVE-2024-0924 · GHSA-2532-vm9m-g275

Tenda AC10U formSetPPTPServer stack-based overflow

HIGH 81

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2024-01-26 No fix listed CWE-121

TI-2024-02663 CVE-2024-2853 · GHSA-47ww-f64v-7564

Tenda AC10U setsambacfg formSetSambaConf os command injection

HIGH 75

A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04009 Published 2024-03-24 No fix listed CWE-78

TI-2025-13895 CVE-2025-15218 · GHSA-6mxp-7c6p-vwm2

Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow

HIGH 73

A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03327 Published 2025-12-30 No fix listed CWE-119

TI-2025-13892 CVE-2025-15215 · GHSA-p9pg-8prj-h5rw

Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow

HIGH 73

A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00702 Published 2025-12-30 No fix listed CWE-119

TI-2024-02523 CVE-2024-2710 · GHSA-jx32-f9jj-34p6

Tenda AC10U openSchedWifi setSchedWifi stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2024-03-20 No fix listed CWE-121

TI-2024-02522 CVE-2024-2709 · GHSA-rx3g-7rv4-58vw

Tenda AC10U SetStaticRouteCfg fromSetRouteStatic stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2024-03-20 No fix listed CWE-121

TI-2024-02520 CVE-2024-2707 · GHSA-8m4c-mqff-jhwh

Tenda AC10U WriteFacMac formWriteFacMac os command injection

HIGH 73

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.046 Published 2024-03-20 No fix listed CWE-78

TI-2024-02519 CVE-2024-2706 · GHSA-gwhc-573h-jxwh

Tenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01734 Published 2024-03-20 No fix listed CWE-121

TI-2024-02518 CVE-2024-2705 · GHSA-r42v-8ppg-qjqx

Tenda AC10U SetNetControlList formSetQosBand stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2024-03-20 No fix listed CWE-121

TI-2024-02517 CVE-2024-2704 · GHSA-jh2w-vmjx-m29q

Tenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01546 Published 2024-03-20 No fix listed CWE-121

TI-2024-02516 CVE-2024-2703 · GHSA-5gh8-jmm4-99ww

Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01546 Published 2024-03-20 No fix listed CWE-121

TI-2024-02575 CVE-2024-2764 · GHSA-9ph4-wxwh-x4xm

Tenda AC10U SetPptpServerCfg formSetPPTPServer stack-based overflow

HIGH 71

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2024-03-21 No fix listed CWE-121

TI-2024-02524 CVE-2024-2711 · GHSA-h9rc-rj87-48r4

Tenda AC10U addWifiMacFilter stack-based overflow

HIGH 71

A vulnerability was found in Tenda AC10U 15.03.06.48.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01494 Published 2024-03-20 No fix listed CWE-121

TI-2024-20318 CVE-2024-30612 · GHSA-7rfv-m2fm-w83c

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed…

HIGH 68

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00667 Published 2024-03-28 No fix listed CWE-121

TI-2024-09525 CVE-2024-10280 · GHSA-xvqq-m3qc-q58j

Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

MEDIUM 64

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00805 Published 2024-10-23 No fix listed CWE-476

TI-2024-21264 CVE-2024-32306 · GHSA-gcgc-cr4r-c8xx

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the…

MEDIUM 59

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00457 Published 2024-04-17 No fix listed CWE-121

TI-2026-07283 CVE-2026-8263 · GHSA-49r7-qrrc-gw83

Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection

MEDIUM 56

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.05003 Published 2026-05-11 No fix listed CWE-77

TI-2024-02521 CVE-2024-2708 · GHSA-x5f4-w9r3-6rpq

Tenda AC10U execCommand formexeCommand stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2024-03-20 No fix listed CWE-121

TI-2024-02574 CVE-2024-2763 · GHSA-c7cm-2h42-m8x5

Tenda AC10U setcfm formSetCfm stack-based overflow

MEDIUM 41

A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.48.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01544 Published 2024-03-21 No fix listed CWE-121

Open these records in search →