Ac6 Firmware

CVEs (176)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-44018	Tenda Ac10	Cri	0.65	9.8	0.15	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.
CVE-2022-25450	Tenda AC6	Cri	0.65	9.8	0.12	Mar 18, 2022	Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.
CVE-2025-52221	Tenda AC6	Cri	0.64	9.8	0.00	Apr 8, 2026	Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
CVE-2025-27129	Tenda AC6	Cri	0.64	9.8	0.02	Aug 20, 2025	An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.
CVE-2025-29031	Tenda AC6	Cri	0.64	9.8	0.00	Mar 14, 2025	Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
CVE-2025-29030	Tenda AC6	Cri	0.64	9.8	0.00	Mar 14, 2025	Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
CVE-2025-29029	Tenda AC6	Cri	0.64	9.8	0.00	Mar 14, 2025	Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
CVE-2025-25343	Tenda AC6	Cri	0.64	9.8	0.01	Feb 12, 2025	Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.
CVE-2024-52275	Tenda Tenda AC6V2	Cri	0.64	9.8	0.01	Dec 4, 2024	Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.
CVE-2024-52274	Tenda Technology Co AC6V2	Cri	0.64	9.8	0.00	Dec 4, 2024	Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
CVE-2024-52273	Tenda Tenda AC6V2	Cri	0.64	9.8	0.00	Dec 4, 2024	Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
CVE-2024-52272	Tenda Tenda AC6V2	Cri	0.64	9.8	0.00	Dec 4, 2024	Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
CVE-2024-52714	Tenda AC6	Cri	0.64	9.8	0.01	Nov 19, 2024	Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
CVE-2023-38823	Tenda AC6	Cri	0.64	9.8	0.01	Nov 20, 2023	Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVE-2023-40830	Tenda AC6	Cri	0.64	9.8	0.01	Oct 3, 2023	Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
CVE-2023-44023	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-44022	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-44021	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVE-2023-44020	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVE-2023-44019	Tenda Ac10	Cri	0.64	9.8	0.01	Sep 27, 2023	Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.

CVE-2023-44018CriSep 27, 2023
Tenda
Ac10
risk 0.65cvss 9.8epss 0.15
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.
CVE-2022-25450CriMar 18, 2022
Tenda
AC6
risk 0.65cvss 9.8epss 0.12
Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.
CVE-2025-52221CriApr 8, 2026
Tenda
AC6
risk 0.64cvss 9.8epss 0.00
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
CVE-2025-27129CriAug 20, 2025
Tenda
AC6
risk 0.64cvss 9.8epss 0.02
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.
CVE-2025-29031CriMar 14, 2025
Tenda
AC6
risk 0.64cvss 9.8epss 0.00
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
CVE-2025-29030CriMar 14, 2025
Tenda
AC6
risk 0.64cvss 9.8epss 0.00
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
CVE-2025-29029CriMar 14, 2025
Tenda
AC6
risk 0.64cvss 9.8epss 0.00
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
CVE-2025-25343CriFeb 12, 2025
Tenda
AC6
risk 0.64cvss 9.8epss 0.01
Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.
CVE-2024-52275CriDec 4, 2024
Tenda
Tenda AC6V2
risk 0.64cvss 9.8epss 0.01
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.
CVE-2024-52274CriDec 4, 2024
Tenda Technology Co
AC6V2
risk 0.64cvss 9.8epss 0.00
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
CVE-2024-52273CriDec 4, 2024
Tenda
Tenda AC6V2
risk 0.64cvss 9.8epss 0.00
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
CVE-2024-52272CriDec 4, 2024
Tenda
Tenda AC6V2
risk 0.64cvss 9.8epss 0.00
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
CVE-2024-52714CriNov 19, 2024
Tenda
AC6
risk 0.64cvss 9.8epss 0.01
Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
CVE-2023-38823CriNov 20, 2023
Tenda
AC6
risk 0.64cvss 9.8epss 0.01
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVE-2023-40830CriOct 3, 2023
Tenda
AC6
risk 0.64cvss 9.8epss 0.01
Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
CVE-2023-44023CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-44022CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVE-2023-44021CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVE-2023-44020CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVE-2023-44019CriSep 27, 2023
Tenda
Ac10
risk 0.64cvss 9.8epss 0.01
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.

Page 1 of 9