Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

17 records in Rx3 Firmware · all components

TI-2026-01836 CVE-2026-2187 · GHSA-wfpp-7rr2-7crp

Tenda RX3 formSetQosBand set_qosMib_list stack-based overflow

HIGH 73

A vulnerability was found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00906 Published 2026-02-08 No fix listed CWE-119

TI-2026-01835 CVE-2026-2186 · GHSA-56wx-xhr6-q6v2

Tenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflow

HIGH 73

A vulnerability has been found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00906 Published 2026-02-08 No fix listed CWE-119

TI-2026-01834 CVE-2026-2185 · GHSA-76cj-j4cw-vf9p

Tenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow

HIGH 73

A flaw has been found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00747 Published 2026-02-08 No fix listed CWE-119

TI-2026-01830 CVE-2026-2181 · GHSA-hcmw-7h84-qr3x

Tenda RX3 openSchedWifi stack-based overflow

HIGH 73

A security flaw has been discovered in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00678 Published 2026-02-08 No fix listed CWE-119

TI-2026-01829 CVE-2026-2180 · GHSA-3hx2-rfg2-h3hp

Tenda RX3 fast_setting_wifi_set stack-based overflow

HIGH 73

A vulnerability was identified in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00655 Published 2026-02-08 No fix listed CWE-119

TI-2025-04967 CVE-2025-5527 · GHSA-28m4-49gg-78fx

Tenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow

HIGH 73

A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12677 Published 2025-06-03 No fix listed CWE-119

TI-2025-02856 CVE-2025-3259 · GHSA-9jwq-9jr3-cjg5

Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01159 Published 2025-04-04 No fix listed CWE-119

TI-2025-21053 CVE-2025-29363 · GHSA-p9px-9grx-vp7w

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime parameters at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00523 Published 2025-03-13 No fix listed CWE-120

TI-2025-21052 CVE-2025-29362 · GHSA-ghpv-8q38-9qmg

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-03-13 No fix listed CWE-120

TI-2025-21051 CVE-2025-29361 · GHSA-f5cq-p3m3-57vm

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVirtualServerCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2025-03-13 No fix listed CWE-120

TI-2025-21050 CVE-2025-29360 · GHSA-62xc-8hfg-r382

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00523 Published 2025-03-13 No fix listed CWE-120

TI-2025-21049 CVE-2025-29359 · GHSA-w7x2-7963-ff8f

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-03-13 No fix listed CWE-120

TI-2025-21048 CVE-2025-29358 · GHSA-f7g9-932q-g34j

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2025-03-13 No fix listed CWE-120

TI-2025-21047 CVE-2025-29357 · GHSA-p487-32h6-758c

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-03-13 No fix listed CWE-404

TI-2025-28696 CVE-2025-44900 · GHSA-mqr4-hr64-mrc9

In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url…

MEDIUM 62

In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00271 Published 2025-05-06 No fix listed CWE-121

TI-2025-03885 CVE-2025-4357 · GHSA-w2f7-j56m-cq8j

Tenda RX3 telnet command injection

MEDIUM 56

A vulnerability was found in Tenda RX3 16.03.13.11_multi.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.15794 Published 2025-05-06 No fix listed CWE-74

TI-2025-28695 CVE-2025-44899 · GHSA-95mr-cf2h-w5jf

There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the…

MEDIUM 49

There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2025-05-06 No fix listed CWE-121

Open these records in search →