Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

34 records in F1203 Firmware · all components

TI-2023-20200 CVE-2023-38940 · GHSA-33c4-f7cm-95m7

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain…

HIGH 82

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20196 CVE-2023-38936 · GHSA-j9fx-3j3q-8wjq

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-08-07 No fix listed CWE-787

TI-2023-20194 CVE-2023-38934 · GHSA-47q5-h2m4-jrq5

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain…

HIGH 82

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20193 CVE-2023-38933 · GHSA-7qcr-6r25-v563

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0…

HIGH 82

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the dev…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20191 CVE-2023-38931 · GHSA-98fv-pj8r-pcqr

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20190 CVE-2023-38930 · GHSA-9238-9cw4-x8wq

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9…

HIGH 82

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter func…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2022-23004 CVE-2022-46547 · GHSA-rr84-54fr-mg7m

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.

HIGH 82

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00885 Published 2022-12-20 No fix listed CWE-120

TI-2022-22995 CVE-2022-46538 · GHSA-rmcr-gcf2-8pqc

Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the…

HIGH 82

Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02455 Published 2022-12-20 No fix listed CWE-78

TI-2024-02785 CVE-2024-2978 · GHSA-675v-vq7w-gjcf

Tenda F1203 setcfm formSetCfm stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda F1203 2.0.1.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01773 Published 2024-03-27 No fix listed CWE-121

TI-2024-02784 CVE-2024-2977 · GHSA-3gww-3727-4334

Tenda F1203 QuickIndex formQuickIndex stack-based overflow

HIGH 73

A vulnerability was found in Tenda F1203 2.0.1.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01773 Published 2024-03-27 No fix listed CWE-121

TI-2024-02783 CVE-2024-2976 · GHSA-g3w4-73xh-8jrw

Tenda F1203 execCommand R7WebsSecurityHandler stack-based overflow

HIGH 73

A vulnerability was found in Tenda F1203 2.0.1.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01669 Published 2024-03-27 No fix listed CWE-121

TI-2022-22999 CVE-2022-46542 · GHSA-cwp8-vgvv-jmjj

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.

HIGH 72

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22998 CVE-2022-46541 · GHSA-q568-w7cw-qc3x

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter…

HIGH 72

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_set.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22997 CVE-2022-46540 · GHSA-qjpf-gh3m-vf44

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.

HIGH 72

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22996 CVE-2022-46539 · GHSA-57mf-jvfg-8px5

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.

HIGH 72

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22994 CVE-2022-46537 · GHSA-f8j2-4682-92jj

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.

HIGH 72

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22993 CVE-2022-46536 · GHSA-p7q8-f6x4-vc47

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp…

HIGH 72

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2024-02786 CVE-2024-2979 · GHSA-hq5f-j5j2-j69g

Tenda F1203 openSchedWifi setSchedWifi stack-based overflow

HIGH 71

A vulnerability classified as critical was found in Tenda F1203 2.0.1.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01669 Published 2024-03-27 No fix listed CWE-121

TI-2024-21266 CVE-2024-32310 · GHSA-665w-9923-7rfr

Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW…

HIGH 70

Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00698 Published 2024-04-17 No fix listed CWE-121

TI-2022-23008 CVE-2022-46551 · GHSA-3xhm-wx2h-r6c8

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter…

HIGH 66

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-23007 CVE-2022-46550 · GHSA-g665-99fm-r57f

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter…

HIGH 66

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-23006 CVE-2022-46549 · GHSA-r5pp-f768-qw9g

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId…

HIGH 66

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-23005 CVE-2022-46548 · GHSA-wmp3-cq9x-jv33

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient.

HIGH 66

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-23003 CVE-2022-46546 · GHSA-g8g2-8rwj-vq2j

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.

HIGH 66

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-23002 CVE-2022-46545 · GHSA-vc87-8xpq-98vg

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.

HIGH 66

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0