Browse CVEs

HIGH 7.5 CVE-2025-63457 Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. This vulnerability allows attac… Ax1803 Firmware No fix yet Fix from $1,9502025-11-10 MEDIUM 5.4 CVE-2025-63834 A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the ssid parameter of … Ac18 Firmware No fix yet Fix from $1,6002025-11-10 HIGH 7.5 CVE-2025-63147 Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerabil… Ax3 Firmware No fix yet Fix from $1,9502025-11-10 HIGH 7.5 CVE-2025-63455 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulner… Ax3 Firmware No fix yet Fix from $1,9502025-11-10 HIGH 7.5 CVE-2025-63456 Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows att… Ax1803 Firmware No fix yet Fix from $1,9502025-11-10 HIGH 7.5 CVE-2025-63152 Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function. This vulner… Ax3 Firmware No fix yet Fix from $1,9502025-11-10 CRITICAL 9.8 CVE-2025-12622 A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd.… Ac10 Firmware Mitigation only Fix from $2,3002025-11-03 CRITICAL 9.8 CVE-2025-12619 A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipu… A15 Firmware Mitigation only Fix from $2,3002025-11-03 CRITICAL 9.8 CVE-2025-12618 A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIniSet. The manipulation of the… Ac8 Firmware Mitigation only Fix from $2,3002025-11-03 CRITICAL 9.8 CVE-2025-12611 A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServer… Ac21 Firmware Mitigation only Fix from $2,3002025-11-03 CRITICAL 9.8 CVE-2025-12596 A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentCo… Ac23 Firmware Mitigation only Fix from $2,3002025-11-02 CRITICAL 9.8 CVE-2025-12595 A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This m… Ac23 Firmware Mitigation only Fix from $2,3002025-11-02 HIGH 7.5 CVE-2025-63454 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vu… Ax3 Firmware No fix yet Fix from $1,9502025-10-31 HIGH 7.5 CVE-2025-63458 Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnera… Ax1803 Firmware No fix yet Fix from $1,9502025-10-31 HIGH 7.5 CVE-2025-61498 A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted … Ac8 Firmware Mitigation only Fix from $1,9502025-10-30 HIGH 8.8 CVE-2025-12322 A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. Execut… Ch22 Firmware No fix yet Fix from $1,9502025-10-27 CRITICAL 9.8 CVE-2025-12273 A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Exe… Ch22 Firmware Mitigation only Fix from $2,3002025-10-27 HIGH 8.8 CVE-2025-12274 A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /gofor… Ch22 Firmware No fix yet Fix from $1,9502025-10-27 CRITICAL 9.8 CVE-2025-12272 A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a mani… Ch22 Firmware Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12271 A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of… Ch22 Firmware Mitigation only Fix from $2,3002025-10-27 CRITICAL 9.8 CVE-2025-12265 A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This mani… Ch22 Firmware Mitigation only Fix from $2,3002025-10-27 HIGH 8.8 CVE-2025-12233 A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a … Ch22 Firmware No fix yet Fix from $1,9502025-10-27 HIGH 8.8 CVE-2025-12234 A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation… Ch22 Firmware No fix yet Fix from $1,9502025-10-27 HIGH 8.8 CVE-2025-12236 A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This man… Ch22 Firmware No fix yet Fix from $1,9502025-10-27 HIGH 8.0 CVE-2025-12235 A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulatio… Ch22 Firmware No fix yet Fix from $1,9502025-10-27 CRITICAL 9.8 CVE-2025-12232 A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClien… Ch22 Firmware Mitigation only Fix from $2,3002025-10-27 HIGH 8.8 CVE-2025-12225 A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component… Ac6 Firmware No fix yet Fix from $1,9502025-10-27 HIGH 8.8 CVE-2025-12214 A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Perform… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502025-10-27 HIGH 8.8 CVE-2025-12213 A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502025-10-27 HIGH 8.8 CVE-2025-12212 A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This ma… O3 Firmware1.0.0.10\(2478\) No fix yet Fix from $1,9502025-10-27