Tenda vulnerabilities, page 5

1,959 vulnerabilities

Known vulnerabilities in Tenda products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 148 products.

7.5HighCVE-2025-1899tenda · tx3_firmwareTenda TX3 setPptpUserList buffer overflowA vulnerability has been found in Tenda TX3 16.03.13.11_multi and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.74%7.5HighCVE-2025-1895tenda · tx3_firmwareTenda TX3 setMacFilterCfg buffer overflowA vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.88%9.8CriticalCVE-2025-1814tenda · ac6_firmwareTenda AC6 WifiExtraSet stack-based overflowA vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.03%9.8CriticalCVE-2025-1853tenda · ac8_firmwareTenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflowA vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS1.46%9CriticalCVE-2025-1851tenda · ac7_firmwareTenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflowA vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS1.09%7.5HighCVE-2025-1898tenda · tx3_firmwareTenda TX3 openSchedWifi buffer overflowA vulnerability, which was classified as critical, was found in Tenda TX3 16.03.13.11_multi. Affected is an unknown function of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.85%7.5HighCVE-2025-55852tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.EPSS0.40%9.8CriticalCVE-2025-55605tenda · ax3_firmwaretenda ax3_firmwareTenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter.EPSS0.41%9.8CriticalCVE-2025-55606tenda · ax3_firmwaretenda ax3_firmwareTenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter.EPSS0.41%9.8CriticalCVE-2025-55613tenda · o3_firmwaretenda o3_firmwareTenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.EPSS0.56%7.5HighCVE-2025-55498tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.EPSS0.40%7.5HighCVE-2025-55482tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.EPSS0.40%6.5MediumCVE-2025-55499tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.EPSS0.26%6.5MediumCVE-2025-55495tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.EPSS0.25%7.3HighCVE-2025-55503tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function.EPSS0.28%7.5HighCVE-2025-55564tenda · ac15_firmwaretenda ac15_firmwareTenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function.EPSS0.40%7.5HighCVE-2025-55483tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.EPSS0.40%9.8CriticalCVE-2025-55603tenda · ax3_firmwaretenda ax3_firmwareTenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter.EPSS0.41%6.5MediumCVE-2025-65804tenda · ax3_firmwaretenda ax3_firmwareTenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).EPSS0.55%4.3MediumCVE-2025-65226tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.EPSS0.26%