Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

31 records in Ax12 Firmware · all components

TI-2023-27009 CVE-2023-49437 · GHSA-gxf9-wp85-jqr4

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability…

HIGH 82

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02411 Published 2023-12-07 No fix listed CWE-77

TI-2023-27000 CVE-2023-49428 · GHSA-qwfc-wqjq-9h4p

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability…

HIGH 76

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02499 Published 2023-12-07 No fix listed CWE-77

TI-2023-26996 CVE-2023-49424 · GHSA-5vpg-rf76-m7c5

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter…

HIGH 76

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2023-12-07 No fix listed CWE-121

TI-2022-22733 CVE-2022-45977 · GHSA-4pmx-vh95-832r

Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.

HIGH 73

Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02108 Published 2022-12-12 No fix listed CWE-78

TI-2022-22141 CVE-2022-45043 · GHSA-r62h-65cq-7gqr

Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.

HIGH 73

Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2022-12-12 No fix listed CWE-78

TI-2025-21014 CVE-2025-29214 · GHSA-v222-4cxf-9gp4

Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C…

HIGH 72

Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/setMacFilterCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00566 Published 2025-03-20 No fix listed CWE-121

TI-2024-26841 CVE-2024-39963 · GHSA-j9gw-h8vh-cc5r

AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit…

HIGH 70

AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01522 Published 2024-07-19 No fix listed CWE-77

TI-2024-26911 CVE-2024-40412 · GHSA-pxcv-w3gg-4fc7

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

MEDIUM 63

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.00344 Published 2024-07-10 No fix listed CWE-121

TI-2025-21015 CVE-2025-29215 · GHSA-mqwp-h2ff-5c74

Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_43fdcc…

MEDIUM 62

Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_43fdcc function at /goform/SetNetControlList.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0084 Published 2025-03-20 No fix listed CWE-121

TI-2024-26962 CVE-2024-40503 · GHSA-qq7f-h836-rrp8

An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of…

MEDIUM 62

An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00402 Published 2024-07-16 No fix listed CWE-940

TI-2022-11231 CVE-2022-28561 · GHSA-7jvg-wpf7-qqcj

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the…

MEDIUM 54

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1014 Published 2022-05-03 No fix listed CWE-787

TI-2022-10902 CVE-2022-28082 · GHSA-phmr-f56m-2v9w

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list…

MEDIUM 54

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08894 Published 2022-05-04 No fix listed CWE-787

TI-2022-22739 CVE-2022-45995 · GHSA-vc9r-97qq-w3qh

There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn.

MEDIUM 51

There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01157 Published 2023-01-05 No fix listed CWE-120

TI-2024-18848 CVE-2024-28383 · GHSA-pvm9-9g6w-fpwp

Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid…

MEDIUM 50

Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub_431CF0 function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00818 Published 2024-03-14 No fix listed CWE-121

TI-2022-22735 CVE-2022-45980 · GHSA-725m-hf23-77j7

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet .

MEDIUM 50

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via /goform/SysToolRestoreSet .

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07454 Published 2022-12-12 No fix listed CWE-352

TI-2021-20509 CVE-2021-45392 · GHSA-5r8w-456g-rjc8

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the…

MEDIUM 47

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in page /goform/setIPv6Status via the prefixDelegate parameter, which causes a Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12294 Published 2022-02-14 No fix listed CWE-787

TI-2022-11527 CVE-2022-28917 · GHSA-q228-f2j5-px48

Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.

MEDIUM 45

Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09551 Published 2022-05-18 No fix listed CWE-787

TI-2023-26998 CVE-2023-49426 · GHSA-995p-45r7-hpvv

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.

MEDIUM 44

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00925 Published 2023-12-07 No fix listed CWE-787

TI-2023-26997 CVE-2023-49425 · GHSA-cvj7-3x95-v3pp

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList…

MEDIUM 44

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00925 Published 2023-12-07 No fix listed CWE-787

TI-2023-25645 CVE-2023-47422 · GHSA-5hxp-xf5x-xjxf

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3…

MEDIUM 41

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00491 Published 2024-02-20 No fix listed CWE-284

TI-2022-22734 CVE-2022-45979 · GHSA-gp75-j23f-w8j9

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid…

MEDIUM 40

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set .

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-12 No fix listed CWE-787

TI-2021-20508 CVE-2021-45391 · GHSA-q94f-mv9v-w3h4

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the…

LOW 36

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/setIPv6Status binary file /usr/sbin/httpd via the conType parameter, which causes a Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01826 Published 2022-02-16 No fix listed CWE-787

TI-2022-09167 CVE-2022-25561 · GHSA-jf2j-rr9g-g6wg

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function…

LOW 35

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01238 Published 2022-03-09 No fix listed CWE-787

TI-2022-09166 CVE-2022-25560 · GHSA-399x-8pcg-rgww

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function…

LOW 35

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01238 Published 2022-03-09 No fix listed CWE-787

TI-2022-09163 CVE-2022-25556 · GHSA-xmqr-m3g6-f3h7

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function…

LOW 35

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01238 Published 2022-03-09 No fix listed CWE-787

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0