Ac500 Firmware (Tenda) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-07-14. Vendor: Tenda.
CVEs of Ac500 Firmware
- CVE-2025-7586 - CVSS 8.8 (high), 2025-07-14: A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. Affected by this vulnerability is the function formSetAPCfg of the…
- CVE-2024-10280 - CVSS 7.5 (high), 2024-10-23: A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue…
- CVE-2024-32316 - CVSS 6.5 (medium), 2024-04-17: Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.
- CVE-2024-32320 - CVSS 5.9 (medium), 2024-04-17: Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.
- CVE-2024-32318 - CVSS 9.8 (critical), 2024-04-17: Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.
- CVE-2024-32314 - CVSS 3.8 (low), 2024-04-17: Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
- CVE-2023-46060 - CVSS 7.5 (high), 2024-04-17: A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the…
- CVE-2024-3910 - CVSS 8.8 (high), 2024-04-17: A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.9(1307). Affected by this issue is the function fromDhcpListClient of…
- CVE-2024-3909 - CVSS 9.8 (critical), 2024-04-17: A vulnerability classified as critical was found in Tenda AC500 2.0.1.9(1307). Affected by this vulnerability is the function formexeCommand of the file…
- CVE-2024-3908 - CVSS 9.8 (critical), 2024-04-17: A vulnerability classified as critical has been found in Tenda AC500 2.0.1.9(1307). Affected is the function formWriteFacMac of the file /goform/WriteFacMac.…
- CVE-2024-3907 - CVSS 9.8 (critical), 2024-04-17: A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been rated as critical. This issue affects the function formSetCfm of the file /goform/setcfm.…
- CVE-2024-3906 - CVSS 8.8 (high), 2024-04-17: A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file…
- CVE-2024-3905 - CVSS 8.8 (high), 2024-04-17: A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been classified as critical. This affects the function R7WebsSecurityHandler of the file…
- CVE-2023-25235 - CVSS 7.5 (high), 2023-02-27: Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.
- CVE-2023-25234 - CVSS 9.8 (critical), 2023-02-27: Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface.
- CVE-2023-25233 - CVSS 9.8 (critical), 2023-02-27: Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
