Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

27 records in Ac23 Firmware · all components

TI-2023-21552 CVE-2023-40799 · GHSA-gvp3-fxjx-vw4p

Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.

HIGH 82

Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-08-25 No fix listed CWE-787

TI-2023-00742 CVE-2023-0782 · GHSA-mjgf-fjmw-jf84

Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write

HIGH 76

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01473 Published 2023-02-11 No fix listed CWE-787

TI-2025-08798 CVE-2025-9605 · GHSA-f8m7-hvrf-gm4v

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

HIGH 75

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.05962 Published 2025-08-29 No fix listed CWE-119

TI-2026-01118 CVE-2026-1420 · GHSA-f8m2-v594-mjj5

Tenda AC23 WifiExtraSet buffer overflow

HIGH 73

A flaw has been found in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0382 Published 2026-01-26 No fix listed CWE-119

TI-2026-00437 CVE-2026-0640 · GHSA-873q-r7q9-7r4r

Tenda AC23 PowerSaveSet sscanf buffer overflow

HIGH 73

A weakness has been identified in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03476 Published 2026-01-06 No fix listed CWE-119

TI-2025-13894 CVE-2025-15217 · GHSA-mg7r-rmfx-wx93

Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow

HIGH 73

A security flaw has been discovered in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00739 Published 2025-12-30 No fix listed CWE-119

TI-2025-13893 CVE-2025-15216 · GHSA-vwcf-px28-cqjr

Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00736 Published 2025-12-30 No fix listed CWE-119

TI-2025-11550 CVE-2025-12596 · GHSA-m64w-vrmh-8h45

Tenda AC23 saveParentControlInfo buffer overflow

HIGH 73

A security vulnerability has been detected in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0121 Published 2025-11-02 No fix listed CWE-119

TI-2025-11549 CVE-2025-12595 · GHSA-58m9-jw89-557f

Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow

HIGH 73

A weakness has been identified in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01099 Published 2025-11-02 No fix listed CWE-119

TI-2025-09894 CVE-2025-10803 · GHSA-jxff-p3fh-x5c9

Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow

HIGH 73

A vulnerability has been found in Tenda AC23 up to 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-09-22 No fix listed CWE-119

TI-2025-07374 CVE-2025-8060 · GHSA-36gq-4prj-vmxm

Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00956 Published 2025-07-23 No fix listed CWE-119

TI-2023-21553 CVE-2023-40800 · GHSA-p5h6-c88m-3c3f

The compare_parentcontrol_time function does not authenticate user input parameters…

HIGH 73

The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-08-25 No fix listed CWE-20

TI-2023-21551 CVE-2023-40798 · GHSA-mmrw-88mx-92rq

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do…

HIGH 73

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-08-25 No fix listed CWE-20

TI-2023-21550 CVE-2023-40797 · GHSA-38rw-jgwg-5764

In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters…

HIGH 73

In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-08-25 No fix listed CWE-20

TI-2025-10404 CVE-2025-11356 · GHSA-3r2v-rgxm-vr46

Tenda AC23 SetStaticRouteCfg sscanf buffer overflow

HIGH 71

A vulnerability was found in Tenda AC23 up to 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-10-07 No fix listed CWE-119

TI-2023-09980 CVE-2023-24334 · GHSA-jw9w-66ww-vwf8

A stack overflow vulnerability in Tenda AC23 with firmware version…

HIGH 70

A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00489 Published 2024-02-21 No fix listed CWE-121

TI-2025-02767 CVE-2025-3167 · GHSA-wgx6-p2v7-c87g

Tenda AC23 API Interface VerAPIMant denial of service

MEDIUM 64

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00911 Published 2025-04-03 No fix listed CWE-404

TI-2023-21555 CVE-2023-40802 · GHSA-47pp-3hj5-634q

The get_parentControl_list_Info function does not verify the parameters entered by the…

MEDIUM 62

The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00812 Published 2023-08-25 No fix listed CWE-787

TI-2022-21036 CVE-2022-43108 · GHSA-mrwf-958h-4gw8

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21035 CVE-2022-43107 · GHSA-65vv-5cpr-35x9

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21034 CVE-2022-43106 · GHSA-35mj-225p-fxvg

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01225 Published 2022-11-03 No fix listed CWE-787

TI-2022-21033 CVE-2022-43105 · GHSA-m6x6-rpx4-5cgj

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21032 CVE-2022-43104 · GHSA-gj2r-45vp-7rgx

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01225 Published 2022-11-03 No fix listed CWE-787

TI-2022-21031 CVE-2022-43103 · GHSA-f4g7-6j5p-f8f9

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21030 CVE-2022-43102 · GHSA-qp56-fqg6-j6mr

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

Open these records in search →