Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

24 records in F1202 Firmware · all components

TI-2024-20340 CVE-2024-30635 · GHSA-jr6v-9h7h-qrjx

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1…

HIGH 82

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2024-03-29 No fix listed CWE-120

TI-2023-20199 CVE-2023-38939 · GHSA-5rj4-8v42-m26x

Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via…

HIGH 82

Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20198 CVE-2023-38938 · GHSA-7rhp-xh7c-3486

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered…

HIGH 82

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20192 CVE-2023-38932 · GHSA-cmvp-x26h-66jv

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered…

HIGH 82

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00955 Published 2023-08-07 No fix listed CWE-787

TI-2023-19243 CVE-2023-37723 · GHSA-f9fp-5vjr-2mp7

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19242 CVE-2023-37722 · GHSA-rvwh-w28g-6mhp

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19241 CVE-2023-37721 · GHSA-mxr4-xcx8-5frq

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19240 CVE-2023-37719 · GHSA-649m-mcv7-3f64

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19239 CVE-2023-37718 · GHSA-c8qw-47fp-h943

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19238 CVE-2023-37717 · GHSA-92p7-r7fp-gqf8

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19237 CVE-2023-37716 · GHSA-7mp7-mmq3-mrhv

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19236 CVE-2023-37715 · GHSA-235r-ch9j-rfqj

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19235 CVE-2023-37714 · GHSA-x6gc-pwv7-hxcm

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19234 CVE-2023-37712 · GHSA-5qhm-fc96-683m

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were…

HIGH 82

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01153 Published 2023-07-10 No fix listed CWE-787

TI-2024-20342 CVE-2024-30637 · GHSA-fw8f-f5ww-mpr8

Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.

HIGH 73

Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01761 Published 2024-03-29 No fix listed CWE-77

TI-2024-03618 CVE-2024-3878 · GHSA-6qpc-4p3x-g9p3

Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01683 Published 2024-04-16 No fix listed CWE-121

TI-2024-03617 CVE-2024-3877 · GHSA-3v43-hgv9-g7jj

Tenda F1202 fromqossetting stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01755 Published 2024-04-16 No fix listed CWE-121

TI-2024-03616 CVE-2024-3876 · GHSA-92q3-88m7-gfwx

Tenda F1202 VirtualSer fromVirtualSer stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01683 Published 2024-04-16 No fix listed CWE-121

TI-2024-20339 CVE-2024-30634 · GHSA-vf75-q6vr-4464

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface…

HIGH 70

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in the fromAddressNat function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00696 Published 2024-03-29 No fix listed CWE-121

TI-2024-20344 CVE-2024-30639 · GHSA-2m33-2vvh-2jjh

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.

MEDIUM 62

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00523 Published 2024-03-29 No fix listed CWE-121

TI-2024-20341 CVE-2024-30636 · GHSA-3rwq-vmr7-cggq

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword…

MEDIUM 62

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00417 Published 2024-03-29 No fix listed CWE-121

TI-2024-20343 CVE-2024-30638 · GHSA-3q4w-x69r-v77m

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.

MEDIUM 53

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00446 Published 2024-03-29 No fix listed CWE-121

TI-2025-08995 CVE-2025-9806 · GHSA-7x7v-wrpx-628j

Tenda F1202 Administrative shadow hard-coded credentials

MEDIUM 43

A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20.

CVSS 4.0LOW 1.8 Local High privileges No interaction EPSS 0.00163 Published 2025-09-02 No fix listed CWE-259

TI-2024-03615 CVE-2024-3875 · GHSA-62v2-fqcx-rj9f

Tenda F1202 Natlimit fromNatlimit stack-based overflow

MEDIUM 41

A vulnerability was found in Tenda F1202 1.2.0.20(408).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01641 Published 2024-04-16 No fix listed CWE-121

Open these records in search →