Vulnerabilidades de Tenda
CVEs publicadas que afetam produtos de Tenda: 509 registro(s), com severidade, exploração e correções.
CH22 34F453 Firmware 30F453 30Ch22 Firmware 29F456 28F456 Firmware 22Wh450 Firmware 21WH450 21F451 20Ac7 Firmware 17Ac21 Firmware 16Ax3 Firmware 16F451 Firmware 16Ac6 Firmware 15Ac15 Firmware 14Ac18 Firmware 14HG10 14W30e Firmware 13AC18 12Ax1806 Firmware 11AC21 11HG9 10AC9 10AC15 10Ac9 Firmware 9W20e Firmware 9CP3 9Ac10 Firmware 8Ac23 Firmware 8I3 8M3 Firmware 8Ac8 Firmware 8I3 Firmware 8AC7 8CX12L 8M3 8AC8 8AC23 8W20E 8Ac20 Firmware 7
CVE-2025-11527
Alta · 8.8
CWE-119 09/10/2025
Tenda AC7 fast_setting_pppoe_set stack-based overflow
A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a manipulation of the argument Password can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-11526
Alta · 8.8
CWE-119 09/10/2025
Tenda AC7 WifiMacFilterSet stack-based overflow
A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifi_chkHz results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.
CVE-2025-11525
Alta · 8.8
CWE-119 08/10/2025
Tenda AC7 SetUpnpCfg stack-based overflow
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-11524
Alta · 8.8
CWE-119 08/10/2025
Tenda AC7 SetDDNSCfg stack-based overflow
A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2025-11523
Alta · 8.8
CWE-77 08/10/2025
Tenda AC7 AdvSetLanip command injection
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2025-11423
Crítica · 9.8
CWE-119 07/10/2025
Corrupção de memória em formSafeEmailFilter do Tenda CH22
Foi identificada uma vulnerabilidade no Tenda CH22 1.0.0.1. Ela afeta a função formSafeEmailFilter do arquivo /goform/SafeEmailFilter. A manipulação do argumento page resulta em corrupção de memória. O ataque pode ser realizado remotamente. O exploit foi tornado público e pode ser utilizado.
CVE-2025-11418
Crítica · 9.8
CWE-119 07/10/2025
Estouro de buffer baseado em pilha no Tenda CH22 no HTTP Request Handler (formWrlsafeset)
Foi detectada uma vulnerabilidade de segurança no Tenda CH22 até a versão 1.0.0.1. Ela afeta a função formWrlsafeset do arquivo /goform/AdvSetWrlsafeset do componente HTTP Request Handler. A manipulação do argumento mit_ssid_index leva a um estouro de buffer baseado em pilha. O ataque pode ser iniciado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2025-11389
Alta · 8.8
CWE-119 07/10/2025
Tenda AC15 saveAutoQos stack-based overflow
A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVE-2025-11388
Alta · 8.8
CWE-119 07/10/2025
Tenda AC15 setNotUpgrade stack-based overflow
A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
CVE-2025-11387
Alta · 8.8
CWE-119 07/10/2025
Tenda AC15 fast_setting_pppoe_set stack-based overflow
A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_setting_pppoe_set. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-11386
Alta · 8.8
CWE-119 07/10/2025
Tenda AC15 POST Parameter SetDDNSCfg stack-based overflow
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
CVE-2025-11385
Alta · 8.8
CWE-119 07/10/2025
Tenda AC20 fast_setting_wifi_set sscanf buffer overflow
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-11356
Alta · 8.8
CWE-119 07/10/2025
Tenda AC23 SetStaticRouteCfg sscanf buffer overflow
A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVE-2025-11328
Alta · 8.8
CWE-119 06/10/2025
Tenda AC18 SetDDNSCfg stack-based overflow
A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2025-11327
Alta · 8.8
CWE-119 06/10/2025
Tenda AC18 SetUpnpCfg stack-based overflow
A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11326
Alta · 8.8
CWE-119 06/10/2025
Tenda AC18 WifiMacFilterSet stack-based overflow
A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVE-2025-11325
Alta · 8.8
CWE-119 06/10/2025
Tenda AC18 fast_setting_pppoe_set stack-based overflow
A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppoe_set. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVE-2025-11324
Alta · 8.8
CWE-119 06/10/2025
Tenda AC18 setNotUpgrade stack-based overflow
A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2025-11123
Alta · 8.8
CWE-119 28/09/2025
Tenda AC18 saveAutoQos stack-based overflow
A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used.
CVE-2025-11122
Alta · 8.8
CWE-119 28/09/2025
Tenda AC18 WizardHandle stack-based overflow
A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2025-11121
Alta · 8.8
CWE-74 28/09/2025
Tenda AC18 AdvSetLanip command injection
A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11120
Alta · 8.8
CWE-119 28/09/2025
Tenda AC8 SetServerConfig formSetServerConfig buffer overflow
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-11117
Alta · 8.8
CWE-119 28/09/2025
Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-11091
Alta · 8.8
CWE-119 27/09/2025
Tenda AC21 SetStaticRouteCfg sscanf buffer overflow
A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
CVE-2025-10838
Alta · 8.8
CWE-119 23/09/2025
Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.