Vulnerabilities

TI-2026-01118 CVE-2026-1420 · GHSA-f8m2-v594-mjj5

Tenda AC23 WifiExtraSet buffer overflow

HIGH 73

A flaw has been found in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0382 Published 2026-01-26 No fix listed CWE-119

TI-2026-00437 CVE-2026-0640 · GHSA-873q-r7q9-7r4r

Tenda AC23 PowerSaveSet sscanf buffer overflow

HIGH 73

A weakness has been identified in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03476 Published 2026-01-06 No fix listed CWE-119

TI-2025-13894 CVE-2025-15217 · GHSA-mg7r-rmfx-wx93

Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow

HIGH 73

A security flaw has been discovered in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00739 Published 2025-12-30 No fix listed CWE-119

TI-2025-13893 CVE-2025-15216 · GHSA-vwcf-px28-cqjr

Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00736 Published 2025-12-30 No fix listed CWE-119

TI-2025-11550 CVE-2025-12596 · GHSA-m64w-vrmh-8h45

Tenda AC23 saveParentControlInfo buffer overflow

HIGH 73

A security vulnerability has been detected in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0121 Published 2025-11-02 No fix listed CWE-119

TI-2025-11549 CVE-2025-12595 · GHSA-58m9-jw89-557f

Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow

HIGH 73

A weakness has been identified in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01099 Published 2025-11-02 No fix listed CWE-119

TI-2025-10404 CVE-2025-11356 · GHSA-3r2v-rgxm-vr46

Tenda AC23 SetStaticRouteCfg sscanf buffer overflow

HIGH 71

A vulnerability was found in Tenda AC23 up to 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-10-07 No fix listed CWE-119

TI-2025-09894 CVE-2025-10803 · GHSA-jxff-p3fh-x5c9

Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow

HIGH 73

A vulnerability has been found in Tenda AC23 up to 16.03.07.52.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-09-22 No fix listed CWE-119

TI-2025-08798 CVE-2025-9605 · GHSA-f8m7-hvrf-gm4v

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

HIGH 75

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.05962 Published 2025-08-29 No fix listed CWE-119

TI-2025-07374 CVE-2025-8060 · GHSA-36gq-4prj-vmxm

Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00956 Published 2025-07-23 No fix listed CWE-119

TI-2025-02767 CVE-2025-3167 · GHSA-wgx6-p2v7-c87g

Tenda AC23 API Interface VerAPIMant denial of service

MEDIUM 64

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00911 Published 2025-04-03 No fix listed CWE-404

TI-2023-09980 CVE-2023-24334 · GHSA-jw9w-66ww-vwf8

A stack overflow vulnerability in Tenda AC23 with firmware version…

HIGH 70

A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00489 Published 2024-02-21 No fix listed CWE-121

TI-2023-21555 CVE-2023-40802 · GHSA-47pp-3hj5-634q

The get_parentControl_list_Info function does not verify the parameters entered by the…

MEDIUM 62

The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00812 Published 2023-08-25 No fix listed CWE-787

TI-2023-21553 CVE-2023-40800 · GHSA-p5h6-c88m-3c3f

The compare_parentcontrol_time function does not authenticate user input parameters…

HIGH 73

The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-08-25 No fix listed CWE-20

TI-2023-21552 CVE-2023-40799 · GHSA-gvp3-fxjx-vw4p

Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.

HIGH 82

Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-08-25 No fix listed CWE-787

TI-2023-21551 CVE-2023-40798 · GHSA-mmrw-88mx-92rq

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do…

HIGH 73

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-08-25 No fix listed CWE-20

TI-2023-21550 CVE-2023-40797 · GHSA-38rw-jgwg-5764

In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters…

HIGH 73

In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0095 Published 2023-08-25 No fix listed CWE-20

TI-2023-02478 CVE-2023-2649 · GHSA-frm5-362q-rgg4

Tenda AC23 Service Port 7329 ate command injection

MEDIUM 50

A vulnerability was found in Tenda AC23 16.03.07.45_cn.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09712 Published 2023-05-11 No fix listed CWE-77

TI-2023-00742 CVE-2023-0782 · GHSA-mjgf-fjmw-jf84

Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write

HIGH 76

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01473 Published 2023-02-11 No fix listed CWE-787

TI-2022-21036 CVE-2022-43108 · GHSA-mrwf-958h-4gw8

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21035 CVE-2022-43107 · GHSA-65vv-5cpr-35x9

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21034 CVE-2022-43106 · GHSA-35mj-225p-fxvg

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01225 Published 2022-11-03 No fix listed CWE-787

TI-2022-21033 CVE-2022-43105 · GHSA-m6x6-rpx4-5cgj

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

TI-2022-21032 CVE-2022-43104 · GHSA-gj2r-45vp-7rgx

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01225 Published 2022-11-03 No fix listed CWE-787

TI-2022-21031 CVE-2022-43103 · GHSA-f4g7-6j5p-f8f9

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list…

MEDIUM 51

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2022-11-03 No fix listed CWE-787

Vulnerabilities

Filters