cbcvebase.

Tenda Ac6 Firmware vulnerabilities

108 known vulnerabilities affecting tenda/ac6_firmware.

Total CVEs
108
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL56HIGH41MEDIUM11

Vulnerabilities

Page 3 of 6
CVE-2024-52275P3CRITICALCVSS 9.8≤ 15.03.06.502024-12-04
CVE-2024-52275 [CRITICAL] CWE-121 CVE-2024-52275: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHan Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.
nvd
CVE-2024-52273P3CRITICALCVSS 9.8≤ 15.03.06.502024-12-04
CVE-2024-52273 [CRITICAL] CWE-121 CVE-2024-52273: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppo Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
nvd
CVE-2024-52274P3CRITICALCVSS 9.8≤ 15.03.06.502024-12-04
CVE-2024-52274 [CRITICAL] CWE-121 CVE-2024-52274: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tp Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
nvd
CVE-2024-52272P3CRITICALCVSS 9.8≤ 15.03.06.502024-12-04
CVE-2024-52272 [CRITICAL] CWE-121 CVE-2024-52272: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLan Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
nvd
CVE-2025-52221P3CRITICALCVSS 9.8v15.03.05.16_multi2026-04-08
CVE-2025-52221 [CRITICAL] CWE-787 CVE-2025-52221: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the func Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
nvd
CVE-2023-38936P3CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38936 [CRITICAL] CWE-787 CVE-2023-38936: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
nvd
CVE-2023-38933P3CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38933 [CRITICAL] CWE-787 CVE-2023-38933: Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2 Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
nvd
CVE-2023-26976P3HIGHCVSS 7.5v15.03.05.092023-04-04
CVE-2023-26976 [HIGH] CWE-787 CVE-2023-26976: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in th Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
nvd
CVE-2023-40838P3CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40838 [CRITICAL] CWE-78 CVE-2023-40838: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.
nvd
CVE-2023-38931P3CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38931 [CRITICAL] CWE-787 CVE-2023-38931: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.
nvd
CVE-2023-38937P3CRITICALCVSS 9.8v15.03.06.232023-08-07
CVE-2023-38937 [CRITICAL] CWE-787 CVE-2023-38937: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
nvd
CVE-2023-40830P3CRITICALCVSS 9.8v15.03.05.192023-10-03
CVE-2023-40830 [CRITICAL] CWE-120 CVE-2023-40830: Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the l Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
nvd
CVE-2024-52714P3CRITICALCVSS 9.8v15.03.06.50_multi2024-11-19
CVE-2024-52714 [CRITICAL] CWE-120 CVE-2024-52714: Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysT Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
nvd
CVE-2025-29029P3CRITICALCVSS 9.8v15.03.05.162025-03-14
CVE-2025-29029 [CRITICAL] CWE-787 CVE-2025-29029: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function. Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
nvd
CVE-2025-29030P3CRITICALCVSS 9.8v15.03.05.162025-03-14
CVE-2025-29030 [CRITICAL] CWE-787 CVE-2025-29030: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function. Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
nvd
CVE-2025-29031P3CRITICALCVSS 9.8v15.03.05.162025-03-14
CVE-2025-29031 [CRITICAL] CWE-787 CVE-2025-29031: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function. Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
nvd
CVE-2023-40846P3CRITICALCVSS 9.8v15.03.05.162023-08-28
CVE-2023-40846 [CRITICAL] CWE-787 CVE-2023-40846: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
nvd
CVE-2023-39670P3CRITICALCVSS 9.8v15.03.05.162023-08-18
CVE-2023-39670 [CRITICAL] CWE-120 CVE-2023-39670: Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fg Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
nvd
CVE-2023-40848P3CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40848 [CRITICAL] CWE-787 CVE-2023-40848: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858."
nvd
CVE-2023-40841P3CRITICALCVSS 9.8v15.03.05.162023-08-30
CVE-2023-40841 [CRITICAL] CWE-787 CVE-2023-40841: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "ad Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node,"
nvd
Tenda Ac6 Firmware vulnerabilities | cvebase