Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

17 records in I22 Firmware · all components

TI-2025-08521 CVE-2025-9297 · GHSA-36vx-jr7p-h7rq

Tenda i22 wxportalauth formWeixinAuthInfoGet stack-based overflow

HIGH 73

A vulnerability was detected in Tenda i22 1.0.0.3(4687).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01118 Published 2025-08-21 No fix listed CWE-119

TI-2024-07030 CVE-2024-7585 · GHSA-m5rr-qpcg-cm8h

Tenda i22 apPortalAuth formApPortalWebAuth buffer overflow

HIGH 73

A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01331 Published 2024-08-07 No fix listed CWE-120

TI-2024-07029 CVE-2024-7584 · GHSA-q4gh-23q4-v22c

Tenda i22 apPortalPhoneAuth formApPortalPhoneAuth buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01261 Published 2024-08-07 No fix listed CWE-120

TI-2024-07028 CVE-2024-7583 · GHSA-vgxc-qp5x-8cv8

Tenda i22 apPortalOneKeyAuth formApPortalOneKeyAuth buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01366 Published 2024-08-07 No fix listed CWE-120

TI-2024-07027 CVE-2024-7582 · GHSA-9jxc-w9wc-543j

Tenda i22 apPortalAccessCodeAuth formApPortalAccessCodeAuth buffer overflow

HIGH 73

A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01366 Published 2024-08-07 No fix listed CWE-120

TI-2024-03957 CVE-2024-4252 · GHSA-cgq2-cjx2-777w

Tenda i22 formSetUrlFilterRule stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01453 Published 2024-04-27 No fix listed CWE-121

TI-2022-22545 CVE-2022-45672 · GHSA-f323-5vpj-59ch

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09141 Published 2022-12-02 No fix listed CWE-120

TI-2022-22544 CVE-2022-45671 · GHSA-2whj-hwg6-5rg8

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in the formSetAppFilterRule function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-12-02 No fix listed CWE-120

TI-2022-22543 CVE-2022-45670 · GHSA-c6f8-34vj-fvc3

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-12-02 No fix listed CWE-120

TI-2022-22542 CVE-2022-45669 · GHSA-2w4p-mxxg-4x58

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterGet function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-12-02 No fix listed CWE-120

TI-2022-22539 CVE-2022-45666 · GHSA-55p7-xf3g-w3ch

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22538 CVE-2022-45665 · GHSA-273j-3w9c-cwgw

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the funcpara1…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00854 Published 2022-12-20 No fix listed CWE-120

TI-2022-22537 CVE-2022-45664 · GHSA-6j2g-r5h9-f55v

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDget function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-12-02 No fix listed CWE-120

TI-2022-22536 CVE-2022-45663 · GHSA-f6gp-5pv4-prgq

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index…

HIGH 72

Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2022-12-02 No fix listed CWE-120

TI-2024-09964 CVE-2024-10750 · GHSA-p7r4-g84v-785w

Tenda i22 SysToo websReadEvent null pointer dereference

MEDIUM 64

A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00879 Published 2024-11-04 No fix listed CWE-476

TI-2022-22541 CVE-2022-45668 · GHSA-2rg4-rjm2-69pg

Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.

MEDIUM 62

Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00348 Published 2022-12-02 No fix listed CWE-352

TI-2022-22540 CVE-2022-45667 · GHSA-g972-mpmq-q7w5

Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.

MEDIUM 62

Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00348 Published 2022-12-02 No fix listed CWE-352

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0