Tenda Ac15_firmware
85 CVEs affecting Tenda Ac15_firmware. Latest disclosed: 2026-04-09. Critical: 25, High: 47.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24103 | Critical | 9.8 | 2026-03-03 | A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi. |
CVE-2026-24105 | Critical | 9.8 | 2026-03-02 | An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a command in… |
CVE-2026-24101 | Critical | 9.8 | 2026-03-02 | An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenat… |
CVE-2025-63666 | Critical | 9.8 | 2025-11-12 | Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the… |
CVE-2025-29462 | Critical | 9.8 | 2025-04-03 | A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socket… |
CVE-2025-25632 | Critical | 9.8 | 2025-03-05 | Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet. |
CVE-2023-36103 | Critical | 9.8 | 2024-09-10 | Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST re… |
CVE-2023-39673 | Critical | 9.8 | 2023-08-18 | Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). |
CVE-2023-30378 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30376 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30375 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30373 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30372 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30371 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30370 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. |
CVE-2023-30369 | Critical | 9.8 | 2023-04-24 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. |
CVE-2022-40851 | Critical | 9.8 | 2022-09-23 | Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat. |
CVE-2022-37175 | Critical | 9.8 | 2022-08-19 | Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. |
CVE-2022-28557 | Critical | 9.8 | 2022-05-04 | There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can… |
CVE-2021-44971 | Critical | 9.8 | 2022-01-28 | Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an at… |