Tenda Ac9 Firmware vulnerabilities

90 known vulnerabilities affecting tenda/ac9_firmware.

Total CVEs
90
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL55HIGH27MEDIUM7LOW1

Vulnerabilities

Page 2 of 5
CVE-2025-29386CRITICALCVSS 9.8v15.03.05.142025-03-14
CVE-2025-29386 [CRITICAL] CWE-787 CVE-2025-29386: In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overf In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
nvd
CVE-2025-29387HIGHCVSS 7.1v15.03.05.142025-03-14
CVE-2025-29387 [HIGH] CWE-787 CVE-2025-29387: In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
nvd
CVE-2025-22946CRITICALCVSS 9.8v15.03.05.192025-01-10
CVE-2025-22946 [CRITICAL] CWE-120 CVE-2025-22946: Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDev Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.
nvd
CVE-2025-22949CRITICALCVSS 9.8v15.03.05.192025-01-10
CVE-2025-22949 [CRITICAL] CWE-77 CVE-2025-22949: Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, whic Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.
nvd
CVE-2024-10280HIGHCVSS 7.1v15.03.2.13v15.03.05.14+2 more2024-10-23
CVE-2024-10280 [HIGH] CWE-476 CVE-2024-10280: A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit
nvd
CVE-2024-42634CRITICALCVSS 9.8v15.03.06.422024-08-16
CVE-2024-42634 [CRITICAL] CWE-94 CVE-2024-42634: A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03. A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result, attacker can execute OS commands with root privileges.
nvd
CVE-2024-25751CRITICALCVSS 9.8v5.03.06.42_multi2024-02-26
CVE-2024-25751 [CRITICAL] CWE-121 CVE-2024-25751: A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_m A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetSysTime function.
nvd
CVE-2024-25756HIGHCVSS 8.0v5.03.06.42_multi2024-02-22
CVE-2024-25756 [HIGH] CWE-121 CVE-2024-25756: A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_m A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formWifiBasicSet function.
nvd
CVE-2024-25746HIGHCVSS 8.8v5.03.06.42_multi2024-02-22
CVE-2024-25746 [HIGH] CWE-121 CVE-2024-25746: Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_mul Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the add_white_node function.
nvd
CVE-2024-25753HIGHCVSS 8.8v5.03.06.42_multi2024-02-22
CVE-2024-25753 [HIGH] CWE-121 CVE-2024-25753: Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_mul Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function.
nvd
CVE-2024-25748HIGHCVSS 8.8v5.03.06.42_multi2024-02-22
CVE-2024-25748 [HIGH] CWE-121 CVE-2024-25748: A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06. A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetIpMacBind function.
nvd
CVE-2024-24543CRITICALCVSS 9.8v15.03.06.42_multi2024-02-05
CVE-2024-24543 [CRITICAL] CWE-787 CVE-2024-24543: Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15 Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker to cause a denial of service or run arbitrary code via crafted overflow data.
nvd
CVE-2023-38823CRITICALCVSS 9.8v15.03.05.19\(6318\)2023-11-20
CVE-2023-38823 [CRITICAL] CWE-120 CVE-2023-38823: Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a rem Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
nvd
CVE-2023-41562CRITICALCVSS 9.8v15.03.06.42_multi2023-08-30
CVE-2023-41562 [CRITICAL] CWE-787 CVE-2023-41562: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.0 Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter time at url /goform/PowerSaveSet.
nvd
CVE-2023-41553CRITICALCVSS 9.8v5.03.06.42_multi2023-08-30
CVE-2023-41553 [CRITICAL] CWE-787 CVE-2023-41553: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contai Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg.
nvd
CVE-2023-41559CRITICALCVSS 9.8v15.03.06.42_multi2023-08-30
CVE-2023-41559 [CRITICAL] CWE-787 CVE-2023-41559: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 w Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting.
nvd
CVE-2023-41552CRITICALCVSS 9.8v5.03.06.42_multi2023-08-30
CVE-2023-41552 [CRITICAL] CWE-787 CVE-2023-41552: Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_setting_wifi_set.
nvd
CVE-2023-41556CRITICALCVSS 9.8v5.03.06.42_multi2023-08-30
CVE-2023-41556 [CRITICAL] CWE-787 CVE-2023-41556: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 w Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind.
nvd
CVE-2023-41554CRITICALCVSS 9.8v5.03.06.42_multi2023-08-30
CVE-2023-41554 [CRITICAL] CWE-787 CVE-2023-41554: Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_cr Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet.
nvd
CVE-2023-41563CRITICALCVSS 9.8v15.03.06.42_multi2023-08-30
CVE-2023-41563 [CRITICAL] CWE-787 CVE-2023-41563: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contai Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo.
nvd
← Previous2 / 5Next →