Ac23 Firmware (Tenda) - vulnerabilities (CVEs)
27 CVEs, 0 in the last 30 days, 57 known versions, newest CVE from 2026-01-26. Vendor: Tenda.
CVEs of Ac23 Firmware
- CVE-2026-1420 - CVSS 9.8 (critical), 2026-01-26: A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument…
- CVE-2026-0640 - CVSS 9.8 (critical), 2026-01-06: A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the…
- CVE-2025-15217 - CVSS 8.8 (high), 2025-12-30: A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler.…
- CVE-2025-15216 - CVSS 8.8 (high), 2025-12-30: A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of…
- CVE-2025-12596 - CVSS 9.8 (critical), 2025-11-02: A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file…
- CVE-2025-12595 - CVSS 9.8 (critical), 2025-11-02: A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This…
- CVE-2025-11356 - CVSS 8.8 (high), 2025-10-07: A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The…
- CVE-2025-10803 - CVSS 8.8 (high), 2025-09-22: A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of…
- CVE-2025-9605 - CVSS 9.8 (critical), 2025-08-29: A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file…
- CVE-2025-8060 - CVSS 8.8 (high), 2025-07-23: A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file…
- CVE-2025-3167 - CVSS 7.5 (high), 2025-04-03: A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file…
- CVE-2023-24334 - CVSS 8 (high), 2024-02-21: A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via…
- CVE-2023-40798 - CVSS 8.8 (high), 2023-08-25: In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a…
- CVE-2023-40797 - CVSS 8.8 (high), 2023-08-25: In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow…
- CVE-2023-40800 - CVSS 8.8 (high), 2023-08-25: The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda…
- CVE-2023-40799 - CVSS 9.8 (critical), 2023-08-25: Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.
- CVE-2023-40802 - CVSS 6.5 (medium), 2023-08-25: The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in…
- CVE-2023-2649 - CVSS 8.8 (high), 2023-05-11: A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the…
- CVE-2023-0782 - CVSS 9.8 (critical), 2023-02-11: A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS…
- CVE-2022-43108 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
- CVE-2022-43107 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
- CVE-2022-43106 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.
- CVE-2022-43105 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
- CVE-2022-43104 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
- CVE-2022-43103 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function.
- CVE-2022-43102 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
- CVE-2022-43101 - CVSS 9.8 (critical), 2022-11-03: Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
