Vulnerability index

Browse CVEs

1,740 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Ac9 Firmware HIGH 7.0
CVE-2025-9731

A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Admi…

Mitigation only
Fix from $1,950 2025-08-31
Ac21 Firmware CRITICAL 9.8
CVE-2025-9605

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetP…

Mitigation only
Fix from $2,300 2025-08-29
Ac10 Firmware HIGH 7.5
CVE-2025-57215

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.

Mitigation only
Fix from $1,950 2025-08-28
Ac10 Firmware MEDIUM 5.3
CVE-2025-57219

Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or …

Mitigation only
Fix from $1,600 2025-08-28
Ac10 Firmware MEDIUM 5.3
CVE-2025-57220

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP p…

Mitigation only
Fix from $1,600 2025-08-28
Ac10 Firmware MEDIUM 5.3
CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurit…

Mitigation only
Fix from $1,600 2025-08-28
Ac10 Firmware MEDIUM 5.3
CVE-2025-57218

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.

No fix yet
Fix from $1,600 2025-08-28
Ac6 Firmware MEDIUM 6.5
CVE-2025-55495

Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.

No fix yet
Fix from $1,600 2025-08-27
Ac1206 Firmware CRITICAL 9.8
CVE-2025-9523

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The…

Mitigation only
Fix from $2,300 2025-08-27
Ch22 Firmware HIGH 8.8
CVE-2025-9443

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing man…

No fix yet
Fix from $1,950 2025-08-26
O3 Firmware CRITICAL 9.8
CVE-2025-55613

Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.

Mitigation only
Fix from $2,300 2025-08-22
Ax3 Firmware HIGH 7.5
CVE-2025-55603

Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter.

No fix yet
Fix from $1,950 2025-08-22
Ax3 Firmware HIGH 7.5
CVE-2025-55605

Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter.

No fix yet
Fix from $1,950 2025-08-22
Ax3 Firmware HIGH 7.5
CVE-2025-55606

Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter.

No fix yet
Fix from $1,950 2025-08-22
Ac10 Firmware HIGH 7.0
CVE-2025-9309

A vulnerability was found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /etc_ro/shadow of the component MD5 Hash Handler. Pe…

No fix yet
Fix from $1,950 2025-08-21
Ac15 Firmware HIGH 7.5
CVE-2025-55564

Tenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function.

No fix yet
Fix from $1,950 2025-08-21
M3 Firmware CRITICAL 9.8
CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the arg…

Mitigation only
Fix from $2,300 2025-08-21
M3 Firmware CRITICAL 9.8
CVE-2025-9299

A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /go…

Mitigation only
Fix from $2,300 2025-08-21
I22 Firmware HIGH 8.8
CVE-2025-9297

A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing…

No fix yet
Fix from $1,950 2025-08-21
Ac6 Firmware HIGH 7.5
CVE-2025-55482

Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.

No fix yet
Fix from $1,950 2025-08-20
Ac6 Firmware HIGH 7.5
CVE-2025-55498

Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.

No fix yet
Fix from $1,950 2025-08-20
Ac6 Firmware HIGH 7.5
CVE-2025-55483

Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.

No fix yet
Fix from $1,950 2025-08-20
Ac6 Firmware HIGH 7.3
CVE-2025-55503

Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function.

No fix yet
Fix from $1,950 2025-08-20
Ac6 Firmware MEDIUM 6.5
CVE-2025-55499

Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.

No fix yet
Fix from $1,600 2025-08-20
Ac6 Firmware CRITICAL 9.8
CVE-2025-31355

A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malici…

Mitigation only
Fix from $2,300 2025-08-20
Ac6 Firmware CRITICAL 9.8
CVE-2025-32010

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response …

Mitigation only
Fix from $2,300 2025-08-20
Ac6 Firmware HIGH 7.5
CVE-2025-30256

A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP…

Mitigation only
Fix from $1,950 2025-08-20
Ac6 Firmware CRITICAL 9.8
CVE-2025-24322

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially …

Mitigation only
Fix from $2,300 2025-08-20
Ac6 Firmware CRITICAL 9.8
CVE-2025-27129

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP requ…

Mitigation only
Fix from $2,300 2025-08-20
Ac6 Firmware HIGH 7.5
CVE-2025-24496

An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafted network…

Mitigation only
Fix from $1,950 2025-08-20