VYPR
← All vendors
Vendor

Tenda

Products
305
CVEs
2,129
Across products
2,505
Status
Private

Products

305
View all 305 products →

Recent CVEs

2,129
View all 2,129 CVEs →
  • CVE-2021-31755CriKEVMay 7, 2021
    Tenda
    AC11
    risk 0.83cvss 9.8epss 0.86

    An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.

  • CVE-2020-10987CriKEVJul 13, 2020
    Tenda
    AC15 AC1900
    risk 0.82cvss 9.8epss 0.80

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

  • CVE-2018-14558CriKEVOct 30, 2018
    Tenda
    AC9
    risk 0.76cvss 9.8epss 0.09

    An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute…

  • CVE-2018-5767CriFeb 15, 2018
    Tenda
    AC15
    risk 0.70cvss 9.8epss 0.47

    An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header.

  • CVE-2020-35391CriJan 1, 2021
    Tenda
    N300 F3
    risk 0.68cvss 9.6epss 0.35

    Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either…

  • CVE-2015-5995CriDec 31, 2015
    Tenda
    N3 Wireless N150
    risk 0.68cvss 9.8epss 0.19

    Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header.

  • CVE-2022-42233CriOct 20, 2022
    Tenda
    11N
    risk 0.67cvss 9.8epss 0.43

    Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.

  • CVE-2023-27076CriApr 10, 2023
    Tenda
    G103
    risk 0.66cvss 9.8epss 0.23

    Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.

  • CVE-2022-35555CriAug 12, 2022
    Tenda
    W6
    risk 0.66cvss 9.8epss 0.25

    A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.

  • CVE-2022-32054CriJul 7, 2022
    Tenda
    Ac10
    risk 0.66cvss 9.8epss 0.32

    Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter.

  • CVE-2022-31446CriJun 14, 2022
    Tenda
    AC18
    risk 0.66cvss 9.8epss 0.34

    Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.

  • CVE-2021-27691CriApr 16, 2021
    Tenda
    G0
    risk 0.66cvss 9.8epss 0.25

    Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted…

  • CVE-2026-6195CriApr 13, 2026
    Totolink
    A7100RU
    risk 0.65cvss 9.8epss 0.14

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The…

  • CVE-2026-5853CriApr 9, 2026
    Totolink
    A7100RU
    risk 0.65cvss 9.8epss 0.14

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument addrPrefixLen leads to os command…

  • CVE-2024-46628CriSep 26, 2024
    Tenda
    G3 Router
    risk 0.65cvss 9.8epss 0.12

    Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function.

  • CVE-2024-46048CriSep 13, 2024
    Tenda
    FH451
    risk 0.65cvss 9.8epss 0.11

    Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i

  • CVE-2023-51092CriDec 26, 2023
    Tenda
    M3
    risk 0.65cvss 9.8epss 0.13

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.

  • CVE-2023-49043CriNov 27, 2023
    Tenda
    AX1803
    risk 0.65cvss 9.8epss 0.13

    Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.

  • CVE-2023-46370CriOct 25, 2023
    Tenda
    W18E
    risk 0.65cvss 9.8epss 0.18

    Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

  • CVE-2023-44018CriSep 27, 2023
    Tenda
    Ac10
    risk 0.65cvss 9.8epss 0.15

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.

View all 2,129 CVEs →