Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

8 records in W12 Firmware · all components

TI-2025-03370 CVE-2025-3820 · GHSA-f9cw-7mcv-gq63

Tenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflow

HIGH 79

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.1269 Published 2025-04-19 No fix listed CWE-119

TI-2025-10584 CVE-2025-11549 · GHSA-4vvc-4999-7hh6

Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow

HIGH 73

A vulnerability has been found in Tenda W12 3.0.0.6(3948).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.08853 Published 2025-10-09 No fix listed CWE-119

TI-2025-03550 CVE-2025-4007 · GHSA-rxjp-vx38-m3vx

Tenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01018 Published 2025-04-28 No fix listed CWE-119

TI-2025-03254 CVE-2025-3693 · GHSA-mxvx-cwcc-38xf

Tenda W12 httpd cgiWifiRadioSet stack-based overflow

HIGH 71

A vulnerability was found in Tenda W12 3.0.0.5.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.07394 Published 2025-04-16 No fix listed CWE-119

TI-2025-10585 CVE-2025-11550 · GHSA-jvm5-jgxh-5564

Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereference

MEDIUM 64

A vulnerability was found in Tenda W12 3.0.0.6(3948).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00978 Published 2025-10-09 No fix listed CWE-404

TI-2025-08967 CVE-2025-9778 · GHSA-pqv8-r6wh-f24x

Tenda W12 Administrative shadow hard-coded credentials

MEDIUM 43

A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948).

CVSS 4.0LOW 1.8 Local High privileges No interaction EPSS 0.00147 Published 2025-09-01 No fix listed CWE-259

TI-2025-03353 CVE-2025-3803 · GHSA-5pf2-m3f5-xwwj

Tenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflow

MEDIUM 42

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01018 Published 2025-04-19 No fix listed CWE-119

TI-2025-03352 CVE-2025-3802 · GHSA-5hmc-37pv-999m

Tenda W12/i24 httpd cgiPingSet stack-based overflow

MEDIUM 42

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2025-04-19 No fix listed CWE-119

Open these records in search →