Tenda Ac7 vulnerabilities, page 3
72 vulnerabilities
Known vulnerabilities in Tenda Ac7, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2024-2895tenda · ac7_firmwareTenda AC7 WifiWpsOOB formWifiWpsOOB stack-based overflowA vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. This vulnerability affects the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257938 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.68%CriticalCVE-2024-2892tenda · ac7_firmwareTenda AC7 setcfm formSetCfm stack-based overflowA vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257935. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.68%CriticalCVE-2024-2900tenda · ac7_firmwareTenda AC7 saveParentControlInfo stack-based overflowA vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. This affects the function saveParentControlInfo of the file /goform/saveParentControlInfo. The manipulation of the argument deviceId/time/urls leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257943. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.68%HighCVE-2024-48826tenda · ac7_firmwaretenda ac7_firmwareTenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.EPSS1.74%HighCVE-2024-48825tenda · ac7_firmwaretenda ac7_firmwareTenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.EPSS1.74%HighCVE-2024-10280tenda · ac10_firmware +9 moreTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereferenceA vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.80%HighCVE-2024-32281tenda · ac7_firmwaretenda ac7_firmwareTenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter.EPSS1.81%CriticalCVE-2024-32301tenda · ac7_firmwaretenda ac7_firmwareTenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.EPSS0.81%CriticalCVE-2026-51845tenda · ac7_firmwaretenda ac7_firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.EPSS0.56%CriticalCVE-2026-51843tenda · ac7_firmwaretenda ac7_firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.EPSS0.56%CriticalCVE-2026-51844tenda · ac7_firmwaretenda ac7_firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.EPSS0.56%CriticalCVE-2026-51846tenda · ac7_firmwaretenda ac7_firmwareIn Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.EPSS0.84%CriticalCVE-2026-4974tenda · ac7_firmwareTenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruptionA flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.EPSS1.01%HighCVE-2026-24441shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Transmits Admin Credentials Without HTTPS ProtectionShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.EPSS0.23%MediumCVE-2026-24427shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Exposes Admin Credentials in Configuration ResponsesShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profile.EPSS0.14%MediumCVE-2026-24434shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Web Interface Lacks CSRF Protections for Admin ActionsShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative functions in the web management interface. The interface does not enforce anti-CSRF tokens or robust origin validation, which can allow an attacker to induce a logged-in administrator to perform unintended state-changing requests and modify router settings.EPSS0.17%MediumCVE-2026-24426shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Reflected XSS via Web Interface Output EncodingShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the web management interface. User-supplied input is reflected in HTTP responses without adequate escaping, allowing injection of arbitrary HTML or JavaScript in a victim’s browser context.EPSS0.22%CriticalCVE-2023-41555tenda · ac7_firmwaretenda ac7_firmwareTenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet.EPSS0.84%CriticalCVE-2023-41556tenda · ac5_firmware +2 moretenda ac5_firmwareTenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind.EPSS1.12%CriticalCVE-2023-41557tenda · ac5_firmware +1 moretenda ac5_firmwareTenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat.EPSS0.84%