Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

62 records in Ac8 Firmware · all components

TI-2025-20992 CVE-2025-29100 · GHSA-x447-66j7-93px

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list.

HIGH 82

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2025-03-24 No fix listed CWE-121

TI-2024-31083 CVE-2024-46652 · GHSA-xh89-f5vr-hmhw

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.

HIGH 82

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2024-09-20 No fix listed CWE-120

TI-2023-20197 CVE-2023-38937 · GHSA-cc8w-76p8-9x8m

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20195 CVE-2023-38935 · GHSA-w6jc-2269-8rpc

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0…

HIGH 82

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand functi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00851 Published 2023-08-07 No fix listed CWE-787

TI-2023-20191 CVE-2023-38931 · GHSA-98fv-pj8r-pcqr

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-04372 CVE-2023-4744 · GHSA-qj82-g9mg-vp5w

Tenda AC8 formSetDeviceName stack-based overflow

HIGH 82

A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01845 Published 2023-09-03 No fix listed CWE-121

TI-2026-03701 CVE-2026-4254 · GHSA-7ppq-fx8r-g889

Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow

HIGH 81

A weakness has been identified in Tenda AC8 up to 16.03.50.11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00923 Published 2026-03-16 No fix listed CWE-119

TI-2026-03699 CVE-2026-4252 · GHSA-7fp9-cvqr-rwmf

Tenda AC8 IPv6 check_is_ipv6 ip address for authentication

HIGH 81

A vulnerability was identified in Tenda AC8 16.03.50.11.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01311 Published 2026-03-16 No fix listed CWE-287

TI-2025-32307 CVE-2025-51087 · GHSA-crh2-v64q-fq49

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at…

HIGH 76

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.12915 Published 2025-07-24 No fix listed CWE-121

TI-2024-38035 CVE-2024-57703 · GHSA-7w8f-hj5m-33r5

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability.

HIGH 76

Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00563 Published 2025-01-16 No fix listed CWE-120

TI-2023-26069 CVE-2023-48194 · GHSA-396g-xc2g-5qhm

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being…

HIGH 75

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00645 Published 2024-07-09 No fix listed CWE-787

TI-2026-01852 CVE-2026-2203 · GHSA-527g-r3hr-w3j8

Tenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflow

HIGH 73

A flaw has been found in Tenda AC8 16.03.33.05.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00814 Published 2026-02-09 No fix listed CWE-119

TI-2025-05229 CVE-2025-5799 · GHSA-rpwp-653m-8vhf

Tenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC8 16.03.34.09.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01359 Published 2025-06-06 No fix listed CWE-119

TI-2025-05228 CVE-2025-5798 · GHSA-c45x-4cr6-92hc

Tenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC8 16.03.34.09.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01359 Published 2025-06-06 No fix listed CWE-119

TI-2025-03896 CVE-2025-4368 · GHSA-4rpv-g3qv-3mfr

Tenda AC8 MtuSetMacWan formGetRouterStatus buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00918 Published 2025-05-06 No fix listed CWE-119

TI-2025-01598 CVE-2025-1853 · GHSA-vmg3-6qh8-v3m9

Tenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01463 Published 2025-03-03 No fix listed CWE-119

TI-2024-10890 CVE-2024-11745 · GHSA-2f2j-v2q5-34f3

Tenda AC8 SetStaticRouteCfg route_static_check stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01316 Published 2024-11-26 No fix listed CWE-119

TI-2024-09391 CVE-2024-10130 · GHSA-6prf-mxrq-j35h

Tenda AC8 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda AC8 16.03.34.06.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01028 Published 2024-10-18 No fix listed CWE-121

TI-2024-09384 CVE-2024-10123 · GHSA-85cf-mfjv-5557

Tenda AC8 saveParentControlInfo compare_parentcontrol_time stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC8 16.03.34.06.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01028 Published 2024-10-18 No fix listed CWE-121

TI-2024-03786 CVE-2024-4066 · GHSA-xhg5-m3mp-pf34

Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01757 Published 2024-04-23 No fix listed CWE-121

TI-2024-03784 CVE-2024-4064 · GHSA-42c2-hx35-9cg7

Tenda AC8 execCommand R7WebsSecurityHandler stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC8 16.03.34.09.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01757 Published 2024-04-23 No fix listed CWE-121

TI-2025-20993 CVE-2025-29101 · GHSA-7f92-xqqr-xjhw

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid…

HIGH 72

Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the get_parentControl_list_Info function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2025-03-20 No fix listed CWE-121

TI-2025-00438 CVE-2025-0528 · GHSA-jj49-w25f-3wxj

Tenda AC8/AC10/AC18 HTTP Request telnet command injection

HIGH 72

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.06234 Published 2025-01-17 No fix listed CWE-74

TI-2023-20783 CVE-2023-39786 · GHSA-c5f9-8cr6-fv89

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.

HIGH 72

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-21 No fix listed CWE-787

TI-2023-20782 CVE-2023-39785 · GHSA-v53m-hchc-89vh

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list…

HIGH 72

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-21 No fix listed CWE-787

Open these records in search →