Browse high-severity CVEs

Ax3 Firmware HIGH 7.5

CVE-2022-24146

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a D…

No fix yet

Fix from $1,950 2022-02-04

Ac15 Firmware CRITICAL 9.8

CVE-2021-44971

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so…

Mitigation only

Fix from $2,300 2022-01-28

G1 Firmware CRITICAL 9.8

CVE-2021-27706

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted…

No fix yet

Fix from $2,300 2021-04-14

G1 Firmware CRITICAL 9.8

CVE-2021-27707

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/…

No fix yet

Fix from $2,300 2021-04-14

G1 Firmware CRITICAL 9.8

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/…

No fix yet

Fix from $2,300 2021-04-14

Ac5 Firmware MEDIUM 5.4

CVE-2021-3186

A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers …

No fix yet

Fix from $1,600 2021-01-26

F3 Firmware MEDIUM 6.5

CVE-2020-35391EPSS 35%

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct reques…

No fix yet

Fix from $1,600 2021-01-01

Ac6 Firmware HIGH 7.5

CVE-2020-28095

On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and…

No fix yet

Fix from $1,950 2020-12-30

Ac15 Firmware CRITICAL 9.8

CVE-2020-15916

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metachara…

No fix yet

Fix from $2,300 2020-07-23

Ac15 Firmware CRITICAL 9.8

CVE-2020-10987 KEVEPSS 80%

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the device…

Mitigation only

Fix from $2,300 2020-07-13

Ac15 Firmware CRITICAL 9.8

CVE-2020-10988

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a …

No fix yet

Fix from $2,300 2020-07-13

Ac15 Firmware MEDIUM 6.1

CVE-2020-10989

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via …

No fix yet

Fix from $1,600 2020-07-13

Ac15 Firmware MEDIUM 6.5

CVE-2020-10986

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause de…

No fix yet

Fix from $1,600 2020-07-13

N301 Firmware HIGH 7.5

CVE-2019-16288

On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.

Mitigation only

Fix from $1,950 2019-09-13

Ac9 Firmware CRITICAL 9.8

CVE-2018-18728

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code exec…

No fix yet

Fix from $2,300 2018-10-29

Ac7 Firmware CRITICAL 9.8

CVE-2018-18729