cbcvebase.

Tenda Ax3 Firmware vulnerabilities

53 known vulnerabilities affecting tenda/ax3_firmware.

Total CVEs
53
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL16HIGH36MEDIUM1

Vulnerabilities

Page 3 of 3
CVE-2022-24145P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24145 [HIGH] CWE-787 CVE-2022-24145: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSe Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of Service (DoS) via the security and security_5g parameters.
nvd
CVE-2022-24154P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24154 [HIGH] CWE-787 CVE-2022-24154: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTi Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the rebootTime parameter.
nvd
CVE-2022-24157P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24157 [HIGH] CWE-787 CVE-2022-24157: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilte Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceList parameter.
nvd
CVE-2022-24149P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24149 [HIGH] CWE-787 CVE-2022-24149: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWireless Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wpapsk_crypto parameter.
nvd
CVE-2022-24158P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24158 [HIGH] CWE-787 CVE-2022-24158: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBin Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
nvd
CVE-2022-24147P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24147 [HIGH] CWE-787 CVE-2022-24147: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMt Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS) via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters.
nvd
CVE-2022-24159P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24159 [HIGH] CWE-787 CVE-2022-24159: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServ Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp parameters.
nvd
CVE-2022-24142P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24142 [HIGH] CWE-787 CVE-2022-24142: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewall Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the firewallEn parameter.
nvd
CVE-2022-24162P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24162 [HIGH] CWE-787 CVE-2022-24162: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentContr Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
nvd
CVE-2022-24161P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24161 [HIGH] CWE-787 CVE-2022-24161: Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControl Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter.
nvd
CVE-2023-40915P3HIGHCVSS 7.5v16.03.12.112023-08-25
CVE-2023-40915 [HIGH] CWE-787 CVE-2023-40915: Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_sett Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.
nvd
CVE-2025-65804P3MEDIUMCVSS 6.5v16.03.12.112025-12-08
CVE-2025-65804 [MEDIUM] CWE-121 CVE-2025-65804: Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which ca Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).
nvd
CVE-2022-24155P3HIGHCVSS 7.5v16.03.12.10_cn2022-02-04
CVE-2022-24155 [HIGH] CWE-787 CVE-2022-24155: Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. Th Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the schedStartTime and schedEndTime parameters.
nvd
← Previous3 / 3