Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:a15:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductA15 (dda525c3-7710-51bd-92f8-168b6fbb32a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4567 not_vulnerable 2026-06-08 08:05:13.544538 Tenda A15 UploadCfg stack-based overflow
CRITICAL (9.8)
A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-23T01:30:13.416Z
Updated: 2026-03-23T11:49:07.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4897 not_vulnerable 2026-06-08 07:29:17.478959 Tenda A15 HTTP POST Request multimodalAdd buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T21:31:06.291Z
Updated: 2025-05-19T14:06:27.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4867 not_vulnerable 2026-06-08 07:29:17.436333 Tenda A15 ArpNerworkSet formArpNerworkSet denial of service
MEDIUM (6.5)
A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T08:31:05.785Z
Updated: 2025-05-19T15:22:59.553Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12619 not_vulnerable 2026-06-08 07:04:30.541790 Tenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapsk_crypto2_4g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2025-11-03T07:02:11.692Z
Updated: 2026-02-24T06:23:35.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0534 not_vulnerable 2026-06-08 06:22:01.299588 Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow
HIGH (7.2)
A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250704. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-15T02:31:05.308Z
Updated: 2025-06-17T21:19:13.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0533 not_vulnerable 2026-06-08 06:22:01.298907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0532 not_vulnerable 2026-06-08 06:22:01.298008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0531 not_vulnerable 2026-06-08 06:22:01.297173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47128 not_vulnerable 2026-06-08 05:50:39.864370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47127 not_vulnerable 2026-06-08 05:50:39.863895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47126 not_vulnerable 2026-06-08 05:50:39.863455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47125 not_vulnerable 2026-06-08 05:50:39.863101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47124 not_vulnerable 2026-06-08 05:50:39.862630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47123 not_vulnerable 2026-06-08 05:50:39.862268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47122 not_vulnerable 2026-06-08 05:50:39.861654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47121 not_vulnerable 2026-06-08 05:50:39.861046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47120 not_vulnerable 2026-06-08 05:50:39.860602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47119 not_vulnerable 2026-06-08 05:50:39.860161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47118 not_vulnerable 2026-06-08 05:50:39.859622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47117 not_vulnerable 2026-06-08 05:50:39.859177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47116 not_vulnerable 2026-06-08 05:50:39.858783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47115 not_vulnerable 2026-06-08 05:50:39.858126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.