Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

63 records in W30e Firmware · all components

TI-2026-28218 CVE-2026-38835 · GHSA-656r-ggpg-wmqm

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the…

HIGH 82

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0215 Published 2026-04-21 No fix listed CWE-77

TI-2025-35439 CVE-2025-57085 · GHSA-7f5g-622m-45vg

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17…

HIGH 82

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2025-09-09 No fix listed CWE-121

TI-2024-21252 CVE-2024-32286 · GHSA-h9hg-q2g5-9w43

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via…

HIGH 82

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00775 Published 2024-04-17 No fix listed CWE-125

TI-2023-27351 CVE-2023-49999 · GHSA-f87c-pf4j-94xf

Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability…

HIGH 82

Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02228 Published 2023-12-07 No fix listed CWE-787

TI-2023-26987 CVE-2023-49404 · GHSA-jjvh-wg5w-2gvm

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.

HIGH 82

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00925 Published 2023-12-07 No fix listed CWE-787

TI-2022-22455 CVE-2022-45506 · GHSA-gfcg-5w9f-h7j7

Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via…

HIGH 82

Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0247 Published 2022-12-08 No fix listed CWE-78

TI-2024-03620 CVE-2024-3880 · GHSA-f36w-mc42-6fcv

Tenda W30E WriteFacMac formWriteFacMac os command injection

HIGH 79

A vulnerability has been found in Tenda W30E 1.0.1.25(633) and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04416 Published 2024-04-16 No fix listed CWE-78

TI-2023-10678 CVE-2023-25231 · GHSA-2657-gffw-m33g

Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function…

HIGH 75

Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00966 Published 2023-02-27 No fix listed CWE-787

TI-2024-21257 CVE-2024-32292 · GHSA-hprc-qr5r-m55p

Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in…

HIGH 73

Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02154 Published 2024-04-17 No fix listed CWE-77

TI-2024-03881 CVE-2024-4171 · GHSA-87v9-pm9w-4grg

Tenda W30E WizardHandle fromWizardHandle stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01357 Published 2024-04-25 No fix listed CWE-121

TI-2024-03622 CVE-2024-3882 · GHSA-q74p-v389-xm2f

Tenda W30E fromRouteStatic stack-based overflow

HIGH 73

A vulnerability was found in Tenda W30E 1.0.1.25(633).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01447 Published 2024-04-16 No fix listed CWE-121

TI-2024-03621 CVE-2024-3881 · GHSA-m46f-6r28-g554

Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow

HIGH 73

A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01459 Published 2024-04-16 No fix listed CWE-121

TI-2024-03619 CVE-2024-3879 · GHSA-p79r-6qwm-7xg5

Tenda W30E setcfm formSetCfm stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01451 Published 2024-04-16 No fix listed CWE-121

TI-2025-35441 CVE-2025-57087 · GHSA-gwjc-9w3c-7gvh

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the…

HIGH 72

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00489 Published 2025-09-09 No fix listed CWE-121

TI-2024-21256 CVE-2024-32291 · GHSA-q2pc-5mm4-68mj

Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page…

HIGH 72

Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00674 Published 2024-04-17 No fix listed CWE-121

TI-2022-22474 CVE-2022-45525 · GHSA-mmxf-fp86-78mm

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction…

HIGH 72

Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo.