Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

61 records in Ax1806 Firmware · all components

TI-2024-29910 CVE-2024-44555 · GHSA-5vrp-5g78-5924

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

HIGH 82

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0073 Published 2024-08-26 No fix listed CWE-120

TI-2024-29907 CVE-2024-44551 · GHSA-rp5g-xj9f-ghvw

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

HIGH 82

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2024-08-26 No fix listed CWE-121

TI-2024-26913 CVE-2024-40415 · GHSA-73g9-pvg4-g265

A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806…

HIGH 82

A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2024-07-15 No fix listed CWE-120

TI-2024-23484 CVE-2024-35580 · GHSA-rv8j-7qfw-8mr3

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

HIGH 82

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2024-05-20 No fix listed CWE-121

TI-2024-23480 CVE-2024-35571 · GHSA-xcxv-fxc3-wxmc

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

HIGH 82

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2024-05-20 No fix listed CWE-120

TI-2023-25658 CVE-2023-47456 · GHSA-v246-p8m5-h759

Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4…

HIGH 78

Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00801 Published 2023-11-07 No fix listed CWE-125

TI-2023-25657 CVE-2023-47455 · GHSA-2wh3-v786-vq3m

Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in…

HIGH 78

Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their siz…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00801 Published 2023-11-07 No fix listed CWE-787

TI-2024-29915 CVE-2024-44565 · GHSA-7wc7-j82h-f9pw

Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the…

HIGH 76

Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00612 Published 2024-08-26 No fix listed CWE-121

TI-2024-29914 CVE-2024-44563 · GHSA-9gr6-q98c-q2r4

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

HIGH 76

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00612 Published 2024-08-26 No fix listed CWE-121

TI-2024-29913 CVE-2024-44558 · GHSA-grmc-8w5p-47x7

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

HIGH 76

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2024-08-26 No fix listed CWE-121

TI-2024-29909 CVE-2024-44553 · GHSA-9fhr-488x-fp7h

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

HIGH 76

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2024-08-26 No fix listed CWE-121

TI-2024-29906 CVE-2024-44550 · GHSA-m56p-h3j2-3v46

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

HIGH 76

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2024-08-26 No fix listed CWE-121

TI-2024-26912 CVE-2024-40414 · GHSA-gcx5-qrc7-cqmf

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806…

HIGH 76

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2024-07-15 No fix listed CWE-121

TI-2024-29911 CVE-2024-44556 · GHSA-pg2r-prx2-mw84

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

HIGH 75

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00377 Published 2024-08-26 No fix listed CWE-121

TI-2024-29908 CVE-2024-44552 · GHSA-8797-vvp8-wj9v

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

HIGH 75

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00377 Published 2024-08-26 No fix listed CWE-787

TI-2024-29905 CVE-2024-44549 · GHSA-gj2j-3p2j-pmwr

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

HIGH 75

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00377 Published 2024-08-26 No fix listed CWE-121

TI-2024-26914 CVE-2024-40416 · GHSA-wjcg-c99p-6q65

A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806…

HIGH 75

A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00577 Published 2024-07-15 No fix listed CWE-121

TI-2024-03942 CVE-2024-4237 · GHSA-vp2r-x5x7-7629

Tenda AX1806 execCommand R7WebsSecurityHandler stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01451 Published 2024-04-26 No fix listed CWE-121

TI-2025-43203 CVE-2025-71021 · GHSA-29x9-q4j7-wg69

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-01-14 No fix listed CWE-121

TI-2025-43202 CVE-2025-71020 · GHSA-w9wr-47qf-x6gr

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2026-01-16 No fix listed CWE-121

TI-2025-43201 CVE-2025-71019 · GHSA-fr64-mhrh-8996

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2026-01-15 No fix listed CWE-121

TI-2025-43128 CVE-2025-70753 · GHSA-23jw-wj29-xjcv

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00456 Published 2026-01-13 No fix listed CWE-121

TI-2025-43127 CVE-2025-70747 · GHSA-6324-xgr6-hv22

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00565 Published 2026-01-14 No fix listed CWE-121

TI-2025-43126 CVE-2025-70746 · GHSA-c32g-q944-x46p

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00445 Published 2026-01-16 No fix listed CWE-121

TI-2025-43125 CVE-2025-70744 · GHSA-rfv7-m5gp-fxpc

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType…

HIGH 72

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2026-01-15 No fix listed CWE-121

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0