Tenda vulnerabilities, page 4

1,959 vulnerabilities

Known vulnerabilities in Tenda products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 148 products.

9.8CriticalCVE-2025-13445tenda · ac21_firmwareTenda AC21 SetIpMacBind stack-based overflowA flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.EPSS4.21%9CriticalCVE-2025-13288tenda · ch22_firmwareTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflowA security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.EPSS0.95%9.8CriticalCVE-2025-13400tenda · ch22_firmwareTenda CH22 WrlExtraGet formWrlExtraGet buffer overflowA vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.EPSS0.75%9CriticalCVE-2025-13258tenda · ac20_firmwareTenda AC20 WifiExtraSet buffer overflowA vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.EPSS0.80%9.8CriticalCVE-2025-52221tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.EPSS0.39%6.8MediumCVE-2025-52363tenda · cp3_pro_firmwaretenda cp3_pro_firmwareTenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative accessEPSS0.24%5.3MediumCVE-2025-52054tenda · ac8_firmwaretenda ac8_firmwareAn issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.EPSS0.32%7.5HighCVE-2025-52364tenda · cp3_pro_firmwaretenda cp3_pro_firmwareInsecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are presentEPSS0.56%7.5HighCVE-2025-61498tenda · ac8_firmwaretenda ac8_firmwareA buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.EPSS0.38%7.5HighCVE-2025-71020tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.37%7.5HighCVE-2025-71019tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.37%7.5HighCVE-2025-71024tenda · ax3_firmwaretenda ax3_firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.46%7.5HighCVE-2025-71021tenda · ax1806_firmwaretenda ax1806_firmwareTenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.46%7.5HighCVE-2025-71025tenda · ax3_firmwaretenda ax3_firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.46%7.5HighCVE-2025-71027tenda · ax3_firmwaretenda ax3_firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.46%7.5HighCVE-2025-71026tenda · ax3_firmwaretenda ax3_firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.46%7.5HighCVE-2025-71023tenda · ax3_firmwaretenda ax3_firmwareTenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.46%7.5HighCVE-2025-1897tenda · tx3_firmwareTenda TX3 SetNetControlList buffer overflowA vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11_multi. This issue affects some unknown processing of the file /goform/SetNetControlList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS1.22%7.5HighCVE-2025-1896tenda · tx3_firmwareTenda TX3 SetStaticRouteCfg buffer overflowA vulnerability classified as critical was found in Tenda TX3 16.03.13.11_multi. This vulnerability affects unknown code of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.85%9.8CriticalCVE-2025-1819tenda · ac7_firmware +1 moreTenda AC7 1200M telnet TendaTelnet os command injectionA vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lan_ip leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS1.79%