Vulnerabilities

TI-2026-01836 CVE-2026-2187 · GHSA-wfpp-7rr2-7crp

Tenda RX3 formSetQosBand set_qosMib_list stack-based overflow

HIGH 73

A vulnerability was found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00906 Published 2026-02-08 No fix listed CWE-119

TI-2026-01835 CVE-2026-2186 · GHSA-56wx-xhr6-q6v2

Tenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflow

HIGH 73

A vulnerability has been found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00906 Published 2026-02-08 No fix listed CWE-119

TI-2026-01834 CVE-2026-2185 · GHSA-76cj-j4cw-vf9p

Tenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow

HIGH 73

A flaw has been found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00747 Published 2026-02-08 No fix listed CWE-119

TI-2026-01830 CVE-2026-2181 · GHSA-hcmw-7h84-qr3x

Tenda RX3 openSchedWifi stack-based overflow

HIGH 73

A security flaw has been discovered in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00678 Published 2026-02-08 No fix listed CWE-119

TI-2026-01829 CVE-2026-2180 · GHSA-3hx2-rfg2-h3hp

Tenda RX3 fast_setting_wifi_set stack-based overflow

HIGH 73

A vulnerability was identified in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00655 Published 2026-02-08 No fix listed CWE-119

TI-2025-04967 CVE-2025-5527 · GHSA-28m4-49gg-78fx

Tenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow

HIGH 73

A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12677 Published 2025-06-03 No fix listed CWE-119

TI-2025-03885 CVE-2025-4357 · GHSA-w2f7-j56m-cq8j

Tenda RX3 telnet command injection

MEDIUM 56

A vulnerability was found in Tenda RX3 16.03.13.11_multi.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.15794 Published 2025-05-06 No fix listed CWE-74

TI-2025-28696 CVE-2025-44900 · GHSA-mqr4-hr64-mrc9

In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url…

MEDIUM 62

In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00271 Published 2025-05-06 No fix listed CWE-121

TI-2025-28695 CVE-2025-44899 · GHSA-95mr-cf2h-w5jf

There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the…

MEDIUM 49

There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2025-05-06 No fix listed CWE-121

TI-2025-02856 CVE-2025-3259 · GHSA-9jwq-9jr3-cjg5

Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01159 Published 2025-04-04 No fix listed CWE-119

TI-2025-21053 CVE-2025-29363 · GHSA-p9px-9grx-vp7w

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime parameters at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00523 Published 2025-03-13 No fix listed CWE-120

TI-2025-21052 CVE-2025-29362 · GHSA-ghpv-8q38-9qmg

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-03-13 No fix listed CWE-120

TI-2025-21051 CVE-2025-29361 · GHSA-f5cq-p3m3-57vm

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVirtualServerCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2025-03-13 No fix listed CWE-120

TI-2025-21050 CVE-2025-29360 · GHSA-62xc-8hfg-r382

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00523 Published 2025-03-13 No fix listed CWE-120

TI-2025-21049 CVE-2025-29359 · GHSA-w7x2-7963-ff8f

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-03-13 No fix listed CWE-120

TI-2025-21048 CVE-2025-29358 · GHSA-f7g9-932q-g34j

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2025-03-13 No fix listed CWE-120

TI-2025-21047 CVE-2025-29357 · GHSA-p487-32h6-758c

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the…

HIGH 72

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-03-13 No fix listed CWE-404

Vulnerabilities

Filters