Ac23 (Tenda) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 59 known versions, newest CVE from 2025-09-22. Vendor: Tenda.
CVEs of Ac23
- CVE-2025-10803 - CVSS 8.8 (high), 2025-09-22: A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of…
- CVE-2025-9605 - CVSS 9.8 (critical), 2025-08-29: A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file…
- CVE-2025-8060 - CVSS 8.8 (high), 2025-07-23: A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file…
- CVE-2025-3167 - CVSS 7.5 (high), 2025-04-03: A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file…
- CVE-2023-40798 - CVSS 8.8 (high), 2023-08-25: In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a…
- CVE-2023-40797 - CVSS 8.8 (high), 2023-08-25: In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow…
- CVE-2023-40801 - CVSS 8.8 (high), 2023-08-25: The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn
- CVE-2023-40800 - CVSS 8.8 (high), 2023-08-25: The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda…
- CVE-2023-40799 - CVSS 9.8 (critical), 2023-08-25: Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.
- CVE-2023-40802 - CVSS 6.5 (medium), 2023-08-25: The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in…
- CVE-2023-2649 - CVSS 8.8 (high), 2023-05-11: A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the…
- CVE-2023-0782 - CVSS 9.8 (critical), 2023-02-11: A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS…
