Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:a15_firmware:15.13.07.13:*:*:*:*:*:*:*

part: o version: 15.13.07.13 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductA15 Firmware (fab4427d-34b5-5a80-b08e-8c7d56fe0524)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4567 vulnerable 2026-06-08 08:05:13.543393 Tenda A15 UploadCfg stack-based overflow
CRITICAL (9.8)
A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-23T01:30:13.416Z
Updated: 2026-03-23T11:49:07.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4897 vulnerable 2026-06-08 07:29:17.478927 Tenda A15 HTTP POST Request multimodalAdd buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T21:31:06.291Z
Updated: 2025-05-19T14:06:27.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4867 vulnerable 2026-06-08 07:29:17.435403 Tenda A15 ArpNerworkSet formArpNerworkSet denial of service
MEDIUM (6.5)
A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T08:31:05.785Z
Updated: 2025-05-19T15:22:59.553Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12619 vulnerable 2026-06-08 07:04:30.540050 Tenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapsk_crypto2_4g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2025-11-03T07:02:11.692Z
Updated: 2026-02-24T06:23:35.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0534 vulnerable 2026-06-08 06:22:01.299455 Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow
HIGH (7.2)
A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250704. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-15T02:31:05.308Z
Updated: 2025-06-17T21:19:13.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0533 vulnerable 2026-06-08 06:22:01.298749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0532 vulnerable 2026-06-08 06:22:01.297969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0531 vulnerable 2026-06-08 06:22:01.296268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47128 vulnerable 2026-06-08 05:50:39.864238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47127 vulnerable 2026-06-08 05:50:39.863873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47126 vulnerable 2026-06-08 05:50:39.863434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47125 vulnerable 2026-06-08 05:50:39.862956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47124 vulnerable 2026-06-08 05:50:39.862607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47123 vulnerable 2026-06-08 05:50:39.862145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47122 vulnerable 2026-06-08 05:50:39.861632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47121 vulnerable 2026-06-08 05:50:39.861025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47120 vulnerable 2026-06-08 05:50:39.860576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47119 vulnerable 2026-06-08 05:50:39.860054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47118 vulnerable 2026-06-08 05:50:39.859598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47117 vulnerable 2026-06-08 05:50:39.859147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47116 vulnerable 2026-06-08 05:50:39.858676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47115 vulnerable 2026-06-08 05:50:39.857073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.