Rx3 Firmware (Tenda) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-02-08. Vendor: Tenda.
CVEs of Rx3 Firmware
- CVE-2026-2186 - CVSS 8.8 (high), 2026-02-08: A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the…
- CVE-2026-2185 - CVSS 8.8 (high), 2026-02-08: A flaw has been found in Tenda RX3 16.03.13.11. This issue affects the function set_device_name of the file /goform/setBlackRule of the component MAC…
- CVE-2026-2187 - CVSS 8.8 (high), 2026-02-08: A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a…
- CVE-2026-2180 - CVSS 8.8 (high), 2026-02-08: A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the…
- CVE-2026-2181 - CVSS 8.8 (high), 2026-02-08: A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi.…
- CVE-2025-5527 - CVSS 8.8 (high), 2025-06-03: A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. It has been rated as critical. This issue affects the function save_staticroute_data of the…
- CVE-2025-44899 - CVSS 9.8 (critical), 2025-05-06: There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the…
- CVE-2025-44900 - CVSS 6.5 (medium), 2025-05-06: In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads…
- CVE-2025-4357 - CVSS 9.8 (critical), 2025-05-06: A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file…
- CVE-2025-3259 - CVSS 8.8 (high), 2025-04-04: A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file…
- CVE-2025-29363 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime parameters at…
- CVE-2025-29359 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This…
- CVE-2025-29362 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList. This vulnerability allows…
- CVE-2025-29358 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg. This vulnerability…
- CVE-2025-29361 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVirtualServerCfg. This vulnerability…
- CVE-2025-29357 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This…
- CVE-2025-29360 - CVSS 7.5 (high), 2025-03-13: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This…
