Tenda Ac8 Firmware vulnerabilities
62 known vulnerabilities affecting tenda/ac8_firmware.
Total CVEs
62
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL33HIGH22MEDIUM7
Vulnerabilities
Page 3 of 4
CVE-2023-40891P3CRITICALCVSS 9.8v16.03.34.062023-08-24
CVE-2023-40891 [CRITICAL] CWE-787 CVE-2023-40891: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter f
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.
nvd
CVE-2023-40892P3CRITICALCVSS 9.8v16.03.34.062023-08-24
CVE-2023-40892 [CRITICAL] CWE-787 CVE-2023-40892: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter s
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.
nvd
CVE-2025-29100P3CRITICALCVSS 9.8v16.03.34.062025-03-24
CVE-2025-29100 [CRITICAL] CWE-121 CVE-2025-29100: Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the p
Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list.
nvd
CVE-2023-38931P3CRITICALCVSS 9.8v16.03.34.062023-08-07
CVE-2023-38931 [CRITICAL] CWE-787 CVE-2023-38931: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.
nvd
CVE-2023-38937P3CRITICALCVSS 9.8v16.03.34.062023-08-07
CVE-2023-38937 [CRITICAL] CWE-787 CVE-2023-38937: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
nvd
CVE-2023-38935P3CRITICALCVSS 9.8v16.03.34.062023-08-07
CVE-2023-38935 [CRITICAL] CWE-787 CVE-2023-38935: Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC
Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.
nvd
CVE-2023-48194P3CRITICALCVSS 9.8v16.03.34.092024-07-09
CVE-2023-48194 [CRITICAL] CWE-787 CVE-2023-48194: Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
nvd
CVE-2025-55852P3HIGHCVSS 7.5v16.03.34.062025-09-03
CVE-2025-55852 [HIGH] CWE-121 CVE-2025-55852: Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the par
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.
nvd
CVE-2023-33672P3HIGHCVSS 7.5v16.03.34.062023-06-02
CVE-2023-33672 [HIGH] CWE-787 CVE-2023-33672: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter i
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
nvd
CVE-2024-10280P3HIGHCVSS 7.5v16.03.34.06v16.03.34.092024-10-23
CVE-2024-10280 [HIGH] CWE-476 CVE-2024-10280: A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit
nvd
CVE-2025-29101P3HIGHCVSS 7.5v16.03.34.062025-03-20
CVE-2025-29101 [HIGH] CWE-121 CVE-2025-29101: Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in
Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the get_parentControl_list_Info function.
nvd
CVE-2023-39786P3HIGHCVSS 7.5v16.03.34.062023-08-21
CVE-2023-39786 [HIGH] CWE-787 CVE-2023-39786: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the ss
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.
nvd
CVE-2023-39785P3HIGHCVSS 7.5v16.03.34.062023-08-21
CVE-2023-39785 [HIGH] CWE-787 CVE-2023-39785: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the se
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function.
nvd
CVE-2023-39784P3HIGHCVSS 7.5v16.03.34.062023-08-21
CVE-2023-39784 [HIGH] CWE-787 CVE-2023-39784: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the sa
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function.
nvd
CVE-2025-51089P3MEDIUMCVSS 6.5v16.03.34.062025-07-24
CVE-2025-51089 [MEDIUM] CWE-122 CVE-2025-51089: Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.Th
Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.
nvd
CVE-2025-51085P3MEDIUMCVSS 5.3v16.03.34.062025-07-24
CVE-2025-51085 [MEDIUM] CWE-121 CVE-2025-51085: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The man
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` and `timeType` leads to stack-based buffer overflow.
nvd
CVE-2025-51088P3MEDIUMCVSS 5.3v16.03.34.062025-07-24
CVE-2025-51088 [MEDIUM] CWE-121 CVE-2025-51088: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The mani
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.
nvd
CVE-2025-61498P3HIGHCVSS 7.5v03.03.10.012025-10-30
CVE-2025-61498 [HIGH] CWE-121 CVE-2025-61498: A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a
A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.
nvd
CVE-2025-25510P3MEDIUMCVSS 6.5v16.03.34.062025-02-21
CVE-2025-25510 [MEDIUM] CWE-120 CVE-2025-25510: Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.
Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.
nvd
CVE-2025-52054P4MEDIUMCVSS 5.3≤ 16.03.33.052025-08-28
CVE-2025-52054 [MEDIUM] CWE-287 CVE-2025-52054: An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.
nvd