Tenda Ac10 vulnerabilities, page 4

94 vulnerabilities

Known vulnerabilities in Tenda Ac10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CriticalCVE-2026-5550tenda · ac10_firmwareTenda AC10 httpd fromSysToolChangePwd stack-based overflowA vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.EPSS0.95%7.5HighCVE-2026-5549tenda · ac10_firmwareTenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded keyA vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this issue is some unknown functionality of the file /webroot_ro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.71%9.8CriticalCVE-2023-42320tenda · ac10_firmwaretenda ac10_firmwareBuffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function.EPSS1.19%9.8CriticalCVE-2023-37710tenda · ac10_firmware +1 moretenda ac10_firmwareTenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.EPSS1.15%9.8CriticalCVE-2023-37711tenda · ac10_firmware +1 moretenda ac10_firmwareTenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.EPSS1.15%9.8CriticalCVE-2023-37716tenda · ac10_firmware +6 moretenda ac10_firmwareTenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.EPSS0.93%9.8CriticalCVE-2023-37717tenda · ac10_firmware +6 moretenda ac10_firmwareTenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.EPSS0.93%9.8CriticalCVE-2023-27020tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.07%9.8CriticalCVE-2023-27013tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.07%9.8CriticalCVE-2023-27014tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.13%9.8CriticalCVE-2023-27021tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.07%9.8CriticalCVE-2023-27019tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.07%9.8CriticalCVE-2023-27016tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.13%9.8CriticalCVE-2023-27018tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.07%9.8CriticalCVE-2023-27015tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.13%9.8CriticalCVE-2023-27017tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.07%9.8CriticalCVE-2023-27012tenda · ac10_firmwaretenda ac10_firmwareTenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.EPSS1.13%9.8CriticalCVE-2023-38933tenda · ac10_firmware +8 moretenda ac10_firmwareTenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.EPSS0.84%9.8CriticalCVE-2023-38936tenda · ac10_firmware +8 moretenda ac10_firmwareTenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.EPSS0.85%9.8CriticalCVE-2023-38937tenda · ac10_firmware +6 moretenda ac10_firmwareTenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.EPSS0.84%