O3 Firmware (Tenda) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-10-27. Vendor: Tenda.

CVEs of O3 Firmware

CVE-2025-12214 - CVSS 8.8 (high), 2025-10-27: A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a…
CVE-2025-12213 - CVSS 8.8 (high), 2025-10-27: A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file…
CVE-2025-12212 - CVSS 8.8 (high), 2025-10-27: A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This…
CVE-2025-12211 - CVSS 9.8 (critical), 2025-10-27: A security flaw has been discovered in Tenda O3 1.0.0.10(2478). Affected by this issue is the function SetValue/GetValue of the file /goform/setDmzInfo. The…
CVE-2025-12210 - CVSS 9.8 (critical), 2025-10-27: A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip.…
CVE-2025-12209 - CVSS 8.8 (high), 2025-10-27: A vulnerability was determined in Tenda O3 1.0.0.10(2478). Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing a…
CVE-2025-55613 - CVSS 9.8 (critical), 2025-08-22: Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.
CVE-2025-7423 - CVSS 8.8 (high), 2025-07-11: A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file…
CVE-2025-7422 - CVSS 8.8 (high), 2025-07-11: A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file…
CVE-2025-7421 - CVSS 8.8 (high), 2025-07-11: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file…
CVE-2025-7420 - CVSS 8.8 (high), 2025-07-11: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file…
CVE-2025-7419 - CVSS 8.8 (high), 2025-07-10: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file…
CVE-2025-7418 - CVSS 8.8 (high), 2025-07-10: A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file…
CVE-2025-7417 - CVSS 8.8 (high), 2025-07-10: A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the…
CVE-2025-7416 - CVSS 8.8 (high), 2025-07-10: A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function fromSysToolTime of the file…
CVE-2025-7414 - CVSS 8.8 (high), 2025-07-10: A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function fromNetToolGet of the file…
CVE-2025-7415 - CVSS 8.8 (high), 2025-07-10: A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file…
CVE-2024-51409 - CVSS 6.5 (medium), 2024-11-06: Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network packet in a fixed format to a router…
CVE-2024-7152 - CVSS 8.8 (high), 2024-07-27: A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file…
CVE-2024-7151 - CVSS 9.8 (critical), 2024-07-27: A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been declared as critical. This vulnerability affects the function fromMacFilterSet of the file…
CVE-2024-36604 - CVSS 9.8 (critical), 2024-06-04: Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers…
CVE-2024-34338 - CVSS 7.2 (high), 2024-05-14: Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/getTraceroute.…