Read the docs

Tenda

Records1964All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical648CVSS 9.0–10.0
CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV
TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

10 records in F3 Firmware · all components

TI-2020-17965 CVE-2020-35391 · GHSA-mfx7-787g-3rp3

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information…

Priority HIGH 67

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14…

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.35248 Published 2021-01-01 No fix listed CWE-425
TI-2026-21918 CVE-2026-27514 · GHSA-jqx8-f6x9-hm34

Tenda F3 Plaintext Credential Exposure in Configuration Download

Priority LOW 31

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in the configuration download functionality.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00251 Published 2026-02-23 No fix listed CWE-201
TI-2026-21916 CVE-2026-27512 · GHSA-62pw-p3ph-rgh9

Tenda F3 Reflected Script Execution via Missing nosniff Header

Priority LOW 23

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00218 Published 2026-02-23 No fix listed CWE-116
TI-2026-21915 CVE-2026-27511 · GHSA-q6w4-grhv-wcp8

Tenda F3 Clickjacking in Web Management Interface

Priority LOW 23

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00246 Published 2026-02-23 No fix listed CWE-1021
TI-2026-21917 CVE-2026-27513 · GHSA-9hjg-4h75-mvc5

Tenda F3 CSRF in Web Management Interface

Priority LOW 22

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00121 Published 2026-02-23 No fix listed CWE-352
Open these records in search →