Tenda Ac10 vulnerabilities, page 2

94 vulnerabilities

Known vulnerabilities in Tenda Ac10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2025-25456tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.EPSS0.64%4.6MediumCVE-2025-25458tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2.EPSS0.26%9.8CriticalCVE-2025-25674tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.EPSS0.45%7.5HighCVE-2025-57215tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.EPSS0.39%5.3MediumCVE-2025-57217tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler.EPSS0.51%5.3MediumCVE-2025-57220tenda · ac10_firmwaretenda ac10_firmwareAn input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.EPSS0.80%5.3MediumCVE-2025-57219tenda · ac10_firmwaretenda ac10_firmwareIncorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components via a crafted request.EPSS0.24%5.3MediumCVE-2025-57218tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.EPSS0.59%9.8CriticalCVE-2025-67073tenda · ac10_firmwaretenda ac10_firmwareA Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.EPSS0.69%6.5MediumCVE-2025-67074tenda · ac10_firmwaretenda ac10_firmwareA Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serverName`) to /goform/AdvSetMacMtuWan.EPSS0.38%9.8CriticalCVE-2025-5629tenda · ac10_firmwareTenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflowA vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg of the component HTTP Handler. The manipulation of the argument startIp/endIp leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.85%5.4MediumCVE-2025-44175tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function.EPSS0.28%9.8CriticalCVE-2025-45779tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.EPSS6.83%9.8CriticalCVE-2025-12622tenda · ac10_firmwareTenda AC10 SysRunCmd formSysRunCmd buffer overflowA vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.90%9CriticalCVE-2025-8178tenda · ac10_firmwareTenda AC10 RequestsProcessLaid heap-based overflowA vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.88%9CriticalCVE-2025-3161tenda · ac10_firmwareTenda AC10 ShutdownSetAdd stack-based overflowA vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.92%9.8CriticalCVE-2022-42164tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.EPSS1.10%9.8CriticalCVE-2022-42166tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.EPSS1.11%9.8CriticalCVE-2022-42163tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.EPSS1.10%9.8CriticalCVE-2022-42171tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.EPSS1.11%