Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

29 records in Ac21 Firmware · all components

TI-2025-08798 CVE-2025-9605 · GHSA-f8m7-hvrf-gm4v

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

HIGH 75

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.05962 Published 2025-08-29 No fix listed CWE-119

TI-2026-01322 CVE-2026-1637 · GHSA-h376-wgw6-6272

Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC21 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00701 Published 2026-01-29 No fix listed CWE-119

TI-2025-12293 CVE-2025-13446 · GHSA-8xxq-7578-r2ww

Tenda AC21 SetSysTimeCfg stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC21 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.04209 Published 2025-11-20 No fix listed CWE-119

TI-2025-12292 CVE-2025-13445 · GHSA-w38m-h6j4-v3r3

Tenda AC21 SetIpMacBind stack-based overflow

HIGH 73

A flaw has been found in Tenda AC21 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.04209 Published 2025-11-20 No fix listed CWE-119

TI-2025-11565 CVE-2025-12611 · GHSA-rfpm-frcg-62rg

Tenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflow

HIGH 73

A vulnerability was identified in Tenda AC21 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00741 Published 2025-11-03 No fix listed CWE-119

TI-2025-10159 CVE-2025-11091 · GHSA-q44p-w6pc-7fm3

Tenda AC21 SetStaticRouteCfg sscanf buffer overflow

HIGH 73

A security flaw has been discovered in Tenda AC21 up to 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0078 Published 2025-09-28 No fix listed CWE-119

TI-2023-09979 CVE-2023-24333 · GHSA-94v8-mxjr-cfmp

A stack overflow vulnerability in Tenda AC21 with firmware version…

HIGH 73

A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00475 Published 2024-02-21 No fix listed CWE-94

TI-2025-09928 CVE-2025-10838 · GHSA-7h4p-j475-jwh2

Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow

HIGH 71

A vulnerability was identified in Tenda AC21 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-09-23 No fix listed CWE-119

TI-2026-01798 CVE-2026-2148 · GHSA-jp5v-2v6v-3w4h

Tenda AC21 Web Management DownloadFlash information disclosure

MEDIUM 64

A security vulnerability has been detected in Tenda AC21 16.03.08.16.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00603 Published 2026-02-08 No fix listed CWE-200

TI-2026-01797 CVE-2026-2147 · GHSA-qg34-2w8p-vh8q

Tenda AC21 Web Management DownloadLog information disclosure

MEDIUM 64

A weakness has been identified in Tenda AC21 16.03.08.16.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00578 Published 2026-02-08 No fix listed CWE-200

TI-2026-01323 CVE-2026-1638 · GHSA-2wx5-jfx2-287m

Tenda AC21 mDMZSetCfg command injection

MEDIUM 57

A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02203 Published 2026-01-29 No fix listed CWE-74

TI-2025-40296 CVE-2025-65226 · GHSA-c57v-2m8r-r29j

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.

MEDIUM 53

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00263 Published 2025-11-20 No fix listed CWE-120

TI-2025-40295 CVE-2025-65223 · GHSA-g293-7m92-j383

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.

MEDIUM 53

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00315 Published 2025-11-20 No fix listed CWE-121

TI-2025-40294 CVE-2025-65222 · GHSA-cx3q-pg98-m72g

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.

MEDIUM 53

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.02524 Published 2025-11-20 No fix listed CWE-121

TI-2025-40293 CVE-2025-65221 · GHSA-prff-37fr-238x

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.

MEDIUM 53

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00315 Published 2025-11-20 No fix listed CWE-121

TI-2025-40292 CVE-2025-65220 · GHSA-hfrj-4h7c-2cgp

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.

MEDIUM 53

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00264 Published 2025-11-20 No fix listed CWE-121

TI-2026-03969 CVE-2026-4565 · GHSA-mcx9-w62j-hjwr

Tenda AC21 SetNetControlList formSetQosBand buffer overflow

MEDIUM 41

A vulnerability was detected in Tenda AC21 16.03.08.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00954 Published 2026-03-23 No fix listed CWE-119

TI-2022-21696 CVE-2022-44163 · GHSA-jvq4-v358-4pgx

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.

MEDIUM 40

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-11-21 No fix listed CWE-787

TI-2022-21695 CVE-2022-44158 · GHSA-c678-978q-6jcv

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.

MEDIUM 40

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-11-21 No fix listed CWE-787

TI-2022-18978 CVE-2022-40076 · GHSA-c93m-pvx8-6mc2

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.

LOW 35

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.