Priority HIGH 82
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00966 · Published 2023-02-27 · No fix listed CWE-787
Priority HIGH 75
A vulnerability was found in Tenda AC500 2.0.1.9(1307).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01906 · Published 2024-04-17 · No fix listed CWE-121
Priority HIGH 75
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16615 · Published 2023-02-27 · No fix listed CWE-787
Priority HIGH 73
A vulnerability was found in Tenda AC500 2.0.1.9(1307).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01237 · Published 2025-07-14 · No fix listed CWE-119
Priority HIGH 72
A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00807 · Published 2024-04-17 · No fix listed CWE-120
Priority HIGH 71
A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0173 · Published 2024-04-17 · No fix listed CWE-121
Priority HIGH 71
A vulnerability was found in Tenda AC500 2.0.1.9(1307).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01658 · Published 2024-04-17 · No fix listed CWE-121
Priority HIGH 66
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.11076 · Published 2023-02-27 · No fix listed CWE-787
Priority MEDIUM 64
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00805 · Published 2024-10-23 · No fix listed CWE-476
Priority MEDIUM 62
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00402 · Published 2024-04-17 · No fix listed CWE-121
Priority MEDIUM 60
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00577 · Published 2024-04-17 · No fix listed CWE-121
Priority MEDIUM 53
Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.01374 · Published 2024-04-17 · No fix listed CWE-77
Priority MEDIUM 53
A vulnerability classified as critical has been found in Tenda AC500 2.0.1.9(1307).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08718 · Published 2024-04-17 · No fix listed CWE-77
Priority MEDIUM 50
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00775 · Published 2024-04-17 · No fix listed CWE-121
Priority MEDIUM 45
A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01676 · Published 2024-04-17 · No fix listed CWE-121
Priority MEDIUM 42
A vulnerability was found in Tenda AC500 2.0.1.9(1307).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01773 · Published 2024-04-17 · No fix listed CWE-121
THREATIST.IORead the docs