Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

108 records in Ac6 Firmware · all components

TI-2025-20961 CVE-2025-29029 · GHSA-9rw4-jg9w-jw2g

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.

HIGH 82

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2025-03-14 No fix listed CWE-787

TI-2023-20197 CVE-2023-38937 · GHSA-cc8w-76p8-9x8m

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20196 CVE-2023-38936 · GHSA-j9fx-3j3q-8wjq

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-08-07 No fix listed CWE-787

TI-2023-20193 CVE-2023-38933 · GHSA-7qcr-6r25-v563

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0…

HIGH 82

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the dev…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20191 CVE-2023-38931 · GHSA-98fv-pj8r-pcqr

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20109 CVE-2023-38823 · GHSA-9jpx-jr52-334g

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0…

HIGH 82

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01203 Published 2023-11-20 No fix listed CWE-120

TI-2024-35277 CVE-2024-52714 · GHSA-q222-99qr-rp2h

Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.

HIGH 76

Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00556 Published 2024-11-19 No fix listed CWE-120

TI-2025-20963 CVE-2025-29031 · GHSA-q9jg-pgrj-wq8v

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.

HIGH 75

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2025-03-14 No fix listed CWE-787

TI-2025-20962 CVE-2025-29030 · GHSA-3c2x-g6mp-5gcv

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.

HIGH 75

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2025-03-14 No fix listed CWE-787

TI-2025-18971 CVE-2025-25343 · GHSA-7v4m-vwhv-fmx7

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.

HIGH 75

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00709 Published 2025-02-12 No fix listed CWE-120

TI-2026-04322 CVE-2026-4961 · GHSA-qhww-r997-h23m

Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00786 Published 2026-03-27 No fix listed CWE-119

TI-2026-04321 CVE-2026-4960 · GHSA-mcgx-8v57-hq28

Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow

HIGH 73

A vulnerability was determined in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00786 Published 2026-03-27 No fix listed CWE-119

TI-2025-05283 CVE-2025-5855 · GHSA-v57j-pmmv-88c8

Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01148 Published 2025-06-09 No fix listed CWE-119

TI-2025-05282 CVE-2025-5854 · GHSA-9xmr-64r7-vfjx

Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-06-09 No fix listed CWE-119

TI-2025-05281 CVE-2025-5853 · GHSA-vm64-xcc6-8fhj

Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.07804 Published 2025-06-09 No fix listed CWE-119

TI-2025-05280 CVE-2025-5852 · GHSA-jx3m-4496-3hgp

Tenda AC6 setPptpUserList formSetPPTPUserList buffer overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01094 Published 2025-06-09 No fix listed CWE-119

TI-2025-00283 CVE-2025-0349 · GHSA-5r5h-j8r7-pr7g

Tenda AC6 GetParentControlInfo stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01919 Published 2025-01-09 No fix listed CWE-119

TI-2024-34249 CVE-2024-51116 · GHSA-75gp-f39c-g44v

Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.

HIGH 73

Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00422 Published 2024-11-05 No fix listed CWE-120

TI-2024-09913 CVE-2024-10698 · GHSA-4964-vg4p-rr2m

Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01283 Published 2024-11-02 No fix listed CWE-121

TI-2025-43080 CVE-2025-70252 · GHSA-p7m8-274h-m4f6

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi.

HIGH 72

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-03-02 No fix listed CWE-121

TI-2025-37655 CVE-2025-60343 · GHSA-jxqx-xr97-3qh7

Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50…

HIGH 72

Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the wanMTU, wanSpeed, cloneType, mac, serviceN…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2025-10-22 No fix listed CWE-120

TI-2025-37654 CVE-2025-60342 · GHSA-wqc8-c6c9-w85r

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page…

HIGH 72

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00422 Published 2025-10-22 No fix listed CWE-121

TI-2025-32096 CVE-2025-50262 · GHSA-73r8-cfhc-ffw6

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter.

HIGH 72

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2025-07-03 No fix listed CWE-120

TI-2025-32095 CVE-2025-50260 · GHSA-wm23-vmw2-c7v3

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg…

HIGH 72

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2025-07-03 No fix listed CWE-121

TI-2025-28917 CVE-2025-46035 · GHSA-qq3w-wq6v-mgpw

Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to…

HIGH 72

Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unauthenticated HTTP GET request to the /g…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2025-06-12 No fix listed CWE-120

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0