Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

31 records in W15e Firmware · all components

TI-2023-11894 CVE-2023-27063 · GHSA-26jv-87ph-mc8q

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow…

HIGH 82

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2023-03-13 No fix listed CWE-120

TI-2023-11892 CVE-2023-27061 · GHSA-hhcr-fwhc-fpqh

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow…

HIGH 82

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2023-03-13 No fix listed CWE-120

TI-2024-03831 CVE-2024-4115 · GHSA-3r7v-265j-fg8v

Tenda W15E AddDnsForward formAddDnsForward stack-based overflow

HIGH 79

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03843 CVE-2024-4127 · GHSA-cw57-3gg4-75xr

Tenda W15E guestWifiRuleRefresh stack-based overflow

HIGH 73

A vulnerability was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01757 Published 2024-04-24 No fix listed CWE-121

TI-2024-03842 CVE-2024-4126 · GHSA-g2cq-r84h-65g2

Tenda W15E SetSysTimeCfg formSetSysTime stack-based overflow

HIGH 73

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01757 Published 2024-04-24 No fix listed CWE-121

TI-2024-03841 CVE-2024-4125 · GHSA-c2jf-mjc7-c377

Tenda W15E setStaticRoute formSetStaticRoute stack-based overflow

HIGH 73

A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01757 Published 2024-04-24 No fix listed CWE-121

TI-2024-03840 CVE-2024-4124 · GHSA-5mpc-fr5x-rq6g

Tenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03836 CVE-2024-4120 · GHSA-g22h-xh6j-cgc7

Tenda W15E modifyIpMacBind formIPMacBindModify stack-based overflow

HIGH 73

A vulnerability was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03835 CVE-2024-4119 · GHSA-wm4x-ppr8-vvq4

Tenda W15E delIpMacBind formIPMacBindDel stack-based overflow

HIGH 73

A vulnerability was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03834 CVE-2024-4118 · GHSA-xwv9-fcr7-mxqx

Tenda W15E addIpMacBind formIPMacBindAdd stack-based overflow

HIGH 73

A vulnerability was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2023-11896 CVE-2023-27065 · GHSA-9776-843p-895m

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow…

HIGH 72

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00896 Published 2023-03-13 No fix listed CWE-120

TI-2023-11895 CVE-2023-27064 · GHSA-gf36-3282-vw2r

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow…

HIGH 72

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00896 Published 2023-03-13 No fix listed CWE-120

TI-2023-11893 CVE-2023-27062 · GHSA-jqm3-7599-9xwj

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl…

HIGH 72

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00896 Published 2023-03-13 No fix listed CWE-120

TI-2024-03838 CVE-2024-4122 · GHSA-qxrm-rjv7-w3rx

Tenda W15E setDebugCfg formSetDebugCfg stack-based overflow

HIGH 71

A vulnerability classified as critical was found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03832 CVE-2024-4116 · GHSA-wgf6-mh23-5m7q

Tenda W15E DelDhcpRule formDelDhcpRule stack-based overflow

HIGH 71

A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2022-20366 CVE-2022-42060 · GHSA-pmrf-3j56-wgg6

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack…

HIGH 66

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01142 Published 2022-11-15 No fix listed CWE-121

TI-2022-19436 CVE-2022-40845 · GHSA-65xm-fp9j-m223

The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure…

MEDIUM 62

The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00713 Published 2022-11-15 No fix listed CWE-425

TI-2022-19435 CVE-2022-40844 · GHSA-v897-8cmv-r8gq

In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2…

MEDIUM 60

In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website fi…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00593 Published 2022-11-15 No fix listed CWE-79

TI-2022-20365 CVE-2022-42058 · GHSA-cfqg-5rj6-9crg

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack…

MEDIUM 52

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01377 Published 2022-11-15 No fix listed CWE-787

TI-2022-19434 CVE-2022-40843 · GHSA-25jx-22x6-2cx2

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper…

MEDIUM 45

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.28802 Published 2022-11-15 No fix listed

TI-2024-03839 CVE-2024-4123 · GHSA-2xh5-h62m-35rc

Tenda W15E SetPortMapping formSetPortMapping stack-based overflow

MEDIUM 41

A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03837 CVE-2024-4121 · GHSA-mwvg-g633-qqcv

Tenda W15E formQOSRuleDel stack-based overflow

MEDIUM 41

A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2024-03833 CVE-2024-4117 · GHSA-m99h-pw7x-qh77

Tenda W15E DelPortMapping formDelPortMapping stack-based overflow

MEDIUM 41

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2024-04-24 No fix listed CWE-121

TI-2026-23453 CVE-2026-30140 · GHSA-24pw-8cqg-3ppr

An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn.

LOW 39

An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00372 Published 2026-03-09 No fix listed CWE-284

TI-2022-19861 CVE-2022-41396 · GHSA-7j6c-r569-6rvc

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple…

LOW 39

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01369 Published 2022-11-15 No fix listed CWE-78

Open these records in search →