Browse CVEs

HIGH 7.5 CVE-2025-57070 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function. This vulnerabilit… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57071 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability … G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57072 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function. This v… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57058 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule p… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57059 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function. This vulnerability all… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57061 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and re… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57062 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerabil… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-57057 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerabilit… G3 Firmware after 15.11.0.17 Fix from $1,9502025-09-09 HIGH 8.8 CVE-2025-10120 A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. T… Ac20 Firmware after 16.03.08.12 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-55852 Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g. Ac8 Firmware No fix yet Fix from $1,9502025-09-03 MEDIUM 5.9 CVE-2025-9828 A vulnerability was determined in Tenda CP6 11.10.00.243. The affected element is the function sub_2B7D04 of the component uhttp. Executing manipulat… Cp6 Firmware No fix yet Fix from $1,6002025-09-02 HIGH 8.8 CVE-2025-9813 A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipula… Ch22 Firmware Mitigation only Fix from $1,9502025-09-02 HIGH 8.8 CVE-2025-9812 A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executin… Ch22 Firmware Mitigation only Fix from $1,9502025-09-02 MEDIUM 6.4 CVE-2025-9806 A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component … F1202 Firmware Mitigation only Fix from $1,6002025-09-02 CRITICAL 9.8 CVE-2025-9791 A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manip… Ac20 Firmware Mitigation only Fix from $2,3002025-09-01 HIGH 7.0 CVE-2025-9778 A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the compon… W12 Firmware Mitigation only Fix from $1,9502025-09-01 CRITICAL 9.8 CVE-2025-9748 A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the compo… Ch22 Firmware Mitigation only Fix from $2,3002025-08-31 HIGH 7.0 CVE-2025-9731 A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Admi… Ac9 Firmware Mitigation only Fix from $1,9502025-08-31 CRITICAL 9.8 CVE-2025-9605 A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetP… Ac21 Firmware Mitigation only Fix from $2,3002025-08-29 HIGH 7.5 CVE-2025-57215 Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info. Ac10 Firmware Mitigation only Fix from $1,9502025-08-28 MEDIUM 5.3 CVE-2025-57219 Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or … Ac10 Firmware Mitigation only Fix from $1,6002025-08-28 MEDIUM 5.3 CVE-2025-57220 An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP p… Ac10 Firmware Mitigation only Fix from $1,6002025-08-28 MEDIUM 5.3 CVE-2025-57217 Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurit… Ac10 Firmware Mitigation only Fix from $1,6002025-08-28 MEDIUM 5.3 CVE-2025-57218 Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C. Ac10 Firmware No fix yet Fix from $1,6002025-08-28 MEDIUM 5.3 CVE-2025-52054 An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is c… Ac8 Firmware after 16.03.33.05 Fix from $1,6002025-08-28 MEDIUM 6.5 CVE-2025-55495 Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function. Ac6 Firmware No fix yet Fix from $1,6002025-08-27 CRITICAL 9.8 CVE-2025-9523 A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The… Ac1206 Firmware Mitigation only Fix from $2,3002025-08-27 HIGH 8.8 CVE-2025-9443 A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing man… Ch22 Firmware No fix yet Fix from $1,9502025-08-26 CRITICAL 9.8 CVE-2025-55613 Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter. O3 Firmware Mitigation only Fix from $2,3002025-08-22 HIGH 7.5 CVE-2025-55603 Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter. Ax3 Firmware No fix yet Fix from $1,9502025-08-22