F3 Firmware (Tenda) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-23. Vendor: Tenda.
CVEs of F3 Firmware
- CVE-2026-27514 - CVSS 7.1 (high), 2026-02-23: Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in the configuration download…
- CVE-2026-27511 - CVSS 5.1 (medium), 2026-02-23: Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface…
- CVE-2026-27513 - CVSS 5.1 (medium), 2026-02-23: Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative…
- CVE-2026-27512 - CVSS 6.1 (medium), 2026-02-23: Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface. Responses omit…
- CVE-2025-57571 - CVSS 5.6 (medium), 2025-09-10: Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in goform/setNAT.
- CVE-2025-57570 - CVSS 5.6 (medium), 2025-09-10: Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS.
- CVE-2025-57573 - CVSS 5.6 (medium), 2025-09-10: Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi.
- CVE-2025-57569 - CVSS 5.6 (medium), 2025-09-10: Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT.
- CVE-2025-57572 - CVSS 5.6 (medium), 2025-09-10: Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl.
- CVE-2020-35391 - CVSS 9.6 (critical), 2021-01-01: Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for…
