Tendacn

Records146All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical74CVSS 9.0–10.0

CVSS high66CVSS 7.0–8.9

Exploited now

Tendacn records in CISA KEV

No Tendacn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

G3 Firmware 28 records HIGH Ac6 Firmware 27 records HIGH Ac10u Firmware 23 records HIGH G1 Firmware 23 records MEDIUM Ac15 Firmware 20 records HIGH Ac18 Firmware 18 records HIGH Ac9 Firmware 17 records HIGH Fh1201 Firmware 15 records HIGH

Records

17 records in Ac9 Firmware · all components

TI-2023-21622 CVE-2023-40942 · GHSA-jw52-33wp-prp2

Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter…

HIGH 82

Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-09-07 No fix listed CWE-787

TI-2025-20964 CVE-2025-29032 · GHSA-5xcr-jr93-3x2g

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

MEDIUM 60

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

CVSS 3.1MEDIUM 5.9 Network Low privileges User interaction EPSS 0.04236 Published 2025-03-14 No fix listed CWE-120

TI-2020-14266 CVE-2020-22079 · GHSA-6w98-944g-gpp5

Stack-based buffer overflow in Tenda AC-10U AC1200 Router…

MEDIUM 49

Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0425 Published 2021-10-29 No fix listed CWE-787

TI-2020-10504 CVE-2020-13393 · GHSA-7q2h-j6h8-gpm7

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0…

MEDIUM 48

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03283 Published 2020-05-22 No fix listed CWE-120

TI-2020-10505 CVE-2020-13394 · GHSA-hf62-537c-x632

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0…

MEDIUM 47

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02552 Published 2020-05-22 No fix listed CWE-120

TI-2020-10503 CVE-2020-13392 · GHSA-g5v3-9q89-5r4p

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0…

MEDIUM 47

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02552 Published 2020-05-22 No fix listed CWE-120

TI-2020-10502 CVE-2020-13391 · GHSA-v393-hrm3-64jv

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0…

MEDIUM 47

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02552 Published 2020-05-22 No fix listed CWE-120

TI-2020-10501 CVE-2020-13390 · GHSA-2j5p-cf62-8pj2

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0…

MEDIUM 47

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02552 Published 2020-05-22 No fix listed CWE-120

TI-2020-10500 CVE-2020-13389 · GHSA-gw3g-cf9f-jmp2

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0…

MEDIUM 47

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02552 Published 2020-05-22 No fix listed CWE-120

TI-2018-05467 CVE-2018-7561 · GHSA-qmvq-3468-v9g6

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote…

MEDIUM 46

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of service or possibly have unspecified other impact.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01746 Published 2018-03-01 No fix listed CWE-787

TI-2018-11700 CVE-2018-16334 · GHSA-p98m-xpc7-793v

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN…

MEDIUM 44

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0362 Published 2018-09-02 No fix listed CWE-78

TI-2021-11718 CVE-2021-31627 · GHSA-v22h-283m-9x2j

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0…

MEDIUM 40

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01144 Published 2021-10-29 No fix listed CWE-120

TI-2021-11717 CVE-2021-31624 · GHSA-qvhc-5474-w39h

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0…

MEDIUM 40

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01148 Published 2021-10-29 No fix listed CWE-120

TI-2020-13926 CVE-2020-20746 · GHSA-hxxx-7hr3-hpmx

A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows…

LOW 37

A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02901 Published 2021-09-30 No fix listed CWE-787

TI-2018-11699 CVE-2018-16333 · GHSA-3mg9-cvj8-qmx7

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10…

LOW 36

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01738 Published 2018-09-02 No fix listed CWE-119

TI-2018-10393 CVE-2018-14492 · GHSA-q89p-88cf-m6x8

Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through…

LOW 35

Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01121 Published 2018-07-21 No fix listed CWE-787

TI-2022-16607 CVE-2022-36233 · GHSA-p74g-vq49-qc26

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd…

LOW 24

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00253 Published 2022-08-19 No fix listed CWE-787

Open these records in search →