CVE Intelligence

Vulnerabilidades de Tenda

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Tenda: 509 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-11527 Alta · 8.8 CWE-119 09/10/2025
Tenda AC7 fast_setting_pppoe_set stack-based overflow
A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a manipulation of the argument Password can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-11526 Alta · 8.8 CWE-119 09/10/2025
Tenda AC7 WifiMacFilterSet stack-based overflow
A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifi_chkHz results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.
CVE-2025-11525 Alta · 8.8 CWE-119 08/10/2025
Tenda AC7 SetUpnpCfg stack-based overflow
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-11524 Alta · 8.8 CWE-119 08/10/2025
Tenda AC7 SetDDNSCfg stack-based overflow
A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2025-11523 Alta · 8.8 CWE-77 08/10/2025
Tenda AC7 AdvSetLanip command injection
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2025-11423 Crítica · 9.8 CWE-119 07/10/2025
Corrupção de memória em formSafeEmailFilter do Tenda CH22
Foi identificada uma vulnerabilidade no Tenda CH22 1.0.0.1. Ela afeta a função formSafeEmailFilter do arquivo /goform/SafeEmailFilter. A manipulação do argumento page resulta em corrupção de memória. O ataque pode ser realizado remotamente. O exploit foi tornado público e pode ser utilizado.
CVE-2025-11418 Crítica · 9.8 CWE-119 07/10/2025
Estouro de buffer baseado em pilha no Tenda CH22 no HTTP Request Handler (formWrlsafeset)
Foi detectada uma vulnerabilidade de segurança no Tenda CH22 até a versão 1.0.0.1. Ela afeta a função formWrlsafeset do arquivo /goform/AdvSetWrlsafeset do componente HTTP Request Handler. A manipulação do argumento mit_ssid_index leva a um estouro de buffer baseado em pilha. O ataque pode ser iniciado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2025-11389 Alta · 8.8 CWE-119 07/10/2025
Tenda AC15 saveAutoQos stack-based overflow
A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVE-2025-11388 Alta · 8.8 CWE-119 07/10/2025
Tenda AC15 setNotUpgrade stack-based overflow
A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
CVE-2025-11387 Alta · 8.8 CWE-119 07/10/2025
Tenda AC15 fast_setting_pppoe_set stack-based overflow
A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_setting_pppoe_set. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-11386 Alta · 8.8 CWE-119 07/10/2025
Tenda AC15 POST Parameter SetDDNSCfg stack-based overflow
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
CVE-2025-11385 Alta · 8.8 CWE-119 07/10/2025
Tenda AC20 fast_setting_wifi_set sscanf buffer overflow
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-11356 Alta · 8.8 CWE-119 07/10/2025
Tenda AC23 SetStaticRouteCfg sscanf buffer overflow
A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVE-2025-11328 Alta · 8.8 CWE-119 06/10/2025
Tenda AC18 SetDDNSCfg stack-based overflow
A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2025-11327 Alta · 8.8 CWE-119 06/10/2025
Tenda AC18 SetUpnpCfg stack-based overflow
A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11326 Alta · 8.8 CWE-119 06/10/2025
Tenda AC18 WifiMacFilterSet stack-based overflow
A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVE-2025-11325 Alta · 8.8 CWE-119 06/10/2025
Tenda AC18 fast_setting_pppoe_set stack-based overflow
A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppoe_set. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVE-2025-11324 Alta · 8.8 CWE-119 06/10/2025
Tenda AC18 setNotUpgrade stack-based overflow
A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2025-11123 Alta · 8.8 CWE-119 28/09/2025
Tenda AC18 saveAutoQos stack-based overflow
A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used.
CVE-2025-11122 Alta · 8.8 CWE-119 28/09/2025
Tenda AC18 WizardHandle stack-based overflow
A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2025-11121 Alta · 8.8 CWE-74 28/09/2025
Tenda AC18 AdvSetLanip command injection
A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11120 Alta · 8.8 CWE-119 28/09/2025
Tenda AC8 SetServerConfig formSetServerConfig buffer overflow
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-11117 Alta · 8.8 CWE-119 28/09/2025
Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-11091 Alta · 8.8 CWE-119 27/09/2025
Tenda AC21 SetStaticRouteCfg sscanf buffer overflow
A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
CVE-2025-10838 Alta · 8.8 CWE-119 23/09/2025
Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.