Browse CVEs

HIGH 7.5 CVE-2022-24146 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a D… Ax3 Firmware No fix yet Fix from $1,9502022-02-04 CRITICAL 9.8 CVE-2021-44971 Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so… Ac15 Firmware Mitigation only Fix from $2,3002022-01-28 CRITICAL 9.8 CVE-2021-27706 Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted… G1 Firmware No fix yet Fix from $2,3002021-04-14 CRITICAL 9.8 CVE-2021-27707 Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/… G1 Firmware No fix yet Fix from $2,3002021-04-14 CRITICAL 9.8 CVE-2021-27705 Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/… G1 Firmware No fix yet Fix from $2,3002021-04-14 MEDIUM 5.4 CVE-2021-3186 A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers … Ac5 Firmware No fix yet Fix from $1,6002021-01-26 MEDIUM 6.5 CVE-2020-35391EPSS 35% Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct reques… F3 Firmware No fix yet Fix from $1,6002021-01-01 HIGH 7.5 CVE-2020-28095 On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and… Ac6 Firmware No fix yet Fix from $1,9502020-12-30 CRITICAL 9.8 CVE-2020-15916 goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metachara… Ac15 Firmware No fix yet Fix from $2,3002020-07-23 CRITICAL 9.8 CVE-2020-10987 KEVEPSS 80% The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the device… Ac15 Firmware Mitigation only Fix from $2,3002020-07-13 CRITICAL 9.8 CVE-2020-10988 A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a … Ac15 Firmware No fix yet Fix from $2,3002020-07-13 MEDIUM 6.1 CVE-2020-10989 An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via … Ac15 Firmware No fix yet Fix from $1,6002020-07-13 MEDIUM 6.5 CVE-2020-10986 A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause de… Ac15 Firmware No fix yet Fix from $1,6002020-07-13 HIGH 7.5 CVE-2019-16288 On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash. N301 Firmware Mitigation only Fix from $1,9502019-09-13 CRITICAL 9.8 CVE-2018-18728 An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code exec… Ac9 Firmware No fix yet Fix from $2,3002018-10-29 CRITICAL 9.8 CVE-2018-18729 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $2,3002018-10-29 HIGH 7.5 CVE-2018-18727 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18730 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18731 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18732 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18706 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18707 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18708 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 HIGH 7.5 CVE-2018-18709 An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(63… Ac7 Firmware No fix yet Fix from $1,9502018-10-29 MEDIUM 6.5 CVE-2017-16936 Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, A… Ac9 Firmware No fix yet Fix from $1,6002017-11-24 HIGH 8.8 CVE-2017-16923 Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac1… Ac9 Firmware No fix yet Fix from $1,9502017-11-21 HIGH 7.5 CVE-2017-14514 Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL. W15e Firmware Mitigation only Fix from $1,9502017-09-17 HIGH 7.5 CVE-2017-14515 Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and fo… W15e Firmware Mitigation only Fix from $1,9502017-09-17 MEDIUM 6.8 CVE-2014-7281 Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53_CN allows remote attackers to hij… A32 Firmware No fix yet Fix from $1,6002014-10-23 HIGH 10.0 CVE-2014-5246EPSS 12% The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator acces… A5s Firmware Mitigation only Fix from $1,9502014-08-22