Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

40 records in Ac5 Firmware · all components

TI-2023-20197 CVE-2023-38937 · GHSA-cc8w-76p8-9x8m

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20196 CVE-2023-38936 · GHSA-j9fx-3j3q-8wjq

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-08-07 No fix listed CWE-787

TI-2023-20195 CVE-2023-38935 · GHSA-w6jc-2269-8rpc

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0…

HIGH 82

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand functi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2023-08-07 No fix listed CWE-787

TI-2023-20193 CVE-2023-38933 · GHSA-7qcr-6r25-v563

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0…

HIGH 82

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the dev…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20191 CVE-2023-38931 · GHSA-98fv-pj8r-pcqr

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20190 CVE-2023-38930 · GHSA-9238-9cw4-x8wq

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9…

HIGH 82

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter func…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-19238 CVE-2023-37717 · GHSA-92p7-r7fp-gqf8

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19237 CVE-2023-37716 · GHSA-7mp7-mmq3-mrhv

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7…

HIGH 82

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-15130 CVE-2023-31587 · GHSA-jppc-qcqx-cx45

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE)…

HIGH 82

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01998 Published 2023-05-16 No fix listed

TI-2026-04276 CVE-2026-4906 · GHSA-cfmp-f27r-2qg4

Tenda AC5 POST Request WizardHandle decodePwd stack-based overflow

HIGH 73

A vulnerability was determined in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0265 Published 2026-03-27 No fix listed CWE-119

TI-2026-04275 CVE-2026-4905 · GHSA-g25q-4m65-m6g5

Tenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00644 Published 2026-03-26 No fix listed CWE-119

TI-2026-04274 CVE-2026-4904 · GHSA-9vmx-7mc4-v47m

Tenda AC5 POST Request setcfm formSetCfm stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00759 Published 2026-03-26 No fix listed CWE-119

TI-2026-04273 CVE-2026-4903 · GHSA-39fw-r4pr-87rj

Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption

HIGH 73

A flaw has been found in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.05671 Published 2026-03-26 No fix listed CWE-119

TI-2026-04272 CVE-2026-4902 · GHSA-hpg8-x2mf-jw6x

Tenda AC5 POST Request addressNat fromAddressNat memory corruption

HIGH 73

A vulnerability was detected in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00644 Published 2026-03-26 No fix listed CWE-119

TI-2025-05291 CVE-2025-5863 · GHSA-3xgx-5fr5-rcrq

Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01108 Published 2025-06-09 No fix listed CWE-119

TI-2025-05225 CVE-2025-5795 · GHSA-f35w-jcp9-579f

Tenda AC5 AdvSetLanip fromadvsetlanip buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0106 Published 2025-06-06 No fix listed CWE-119

TI-2025-05224 CVE-2025-5794 · GHSA-qv9v-4gh7-4qhp

Tenda AC5 setPptpUserList formSetPPTPUserList buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda AC5 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0106 Published 2025-06-06 No fix listed CWE-119

TI-2025-06260 CVE-2025-6887 · GHSA-4fhc-366h-3575

Tenda AC5 SetSysTimeCfg stack-based overflow

HIGH 71

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01018 Published 2025-06-30 No fix listed CWE-119

TI-2025-06259 CVE-2025-6886 · GHSA-xfmp-m386-57pc

Tenda AC5 openSchedWifi stack-based overflow

HIGH 71

A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-30 No fix listed CWE-119

TI-2023-22023 CVE-2023-41556 · GHSA-6c44-mxmr-gxgp

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5…

MEDIUM 51

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01121 Published 2023-08-30 No fix listed CWE-787

TI-2023-10673 CVE-2023-25220 · GHSA-qc2w-qcmx-m375

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the…

MEDIUM 51

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2023-04-07 No fix listed CWE-787

TI-2023-10671 CVE-2023-25218 · GHSA-jw8g-rg5r-2x5j

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the…

MEDIUM 51

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2023-04-07 No fix listed CWE-787

TI-2023-22030 CVE-2023-41563 · GHSA-vmvm-pfhw-x878

Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were…

MEDIUM 50

Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-30 No fix listed CWE-787

TI-2023-22029 CVE-2023-41562 · GHSA-mgxr-gr6p-fj59

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5…

MEDIUM 50

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter time at url /goform/PowerSaveSet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-30 No fix listed CWE-787

TI-2023-22028 CVE-2023-41561 · GHSA-9jr9-c576-2hp3

Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were…

MEDIUM 50

Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-30 No fix listed CWE-787

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0