Priority HIGH 82
In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00845 · Published 2026-06-19 · No fix listed CWE-121
Priority HIGH 82
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00555 · Published 2026-06-19 · No fix listed CWE-121
Priority HIGH 82
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00555 · Published 2026-06-19 · No fix listed CWE-121
Priority HIGH 82
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00555 · Published 2026-06-19 · No fix listed CWE-121
Priority HIGH 73
A flaw has been found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00644 · Published 2026-03-27 · No fix listed CWE-119
Priority LOW 35
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.0023 · Published 2026-02-03 · No fix listed CWE-319
Priority LOW 28
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative functions in the web management interface.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00167 · Published 2026-02-03 · No fix listed CWE-352
Priority LOW 29
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.0014 · Published 2026-02-03 · No fix listed CWE-201
Priority LOW 23
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the web management interface.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00229 · Published 2026-02-03 · No fix listed CWE-79
Priority HIGH 71
A vulnerability was determined in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00886 · Published 2025-10-10 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was identified in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00817 · Published 2025-10-09 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was determined in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00817 · Published 2025-10-09 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00821 · Published 2025-10-09 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01057 · Published 2025-10-09 · No fix listed CWE-119
Priority HIGH 73
A flaw has been found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01053 · Published 2025-10-09 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was detected in Tenda AC7 15.03.06.44.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03741 · Published 2025-10-09 · No fix listed CWE-74
Priority HIGH 73
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00942 · Published 2025-08-15 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.13198 · Published 2025-07-22 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01108 · Published 2025-06-09 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.07572 · Published 2025-06-09 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01113 · Published 2025-05-16 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01426 · Published 2025-05-16 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda AC7 15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.07731 · Published 2025-04-07 · No fix listed CWE-119
Priority HIGH 82
A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01096 · Published 2025-03-24 · No fix listed CWE-121
Priority MEDIUM 49
Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the form_fast_setting_wifi_set function, which can cause RCE.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00552 · Published 2025-03-19 · No fix listed CWE-120
Load more
THREATIST.IORead the docs