Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac7_firmware:15.03.06.44:*:*:*:*:*:*:*

part: o version: 15.03.06.44 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc7 Firmware (e360b203-eeb9-50b1-9676-9d801223cdda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4974 vulnerable 2026-06-08 08:07:02.732538 Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption
HIGH (8.8)
A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-03-27T19:52:50.992Z
Updated: 2026-03-31T13:54:19.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9023 vulnerable 2026-06-08 07:45:21.600403 Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-15T08:32:07.431Z
Updated: 2025-08-15T16:01:28.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8017 vulnerable 2026-06-08 07:45:18.676610 Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-22T13:32:07.104Z
Updated: 2025-07-22T13:47:43.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5862 vulnerable 2026-06-08 07:37:25.933188 Tenda AC7 setPptpUserList formSetPPTPUserList buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T05:00:20.243Z
Updated: 2025-06-09T13:23:57.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5861 vulnerable 2026-06-08 07:37:25.931056 Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T04:31:06.939Z
Updated: 2025-06-09T13:24:28.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4810 vulnerable 2026-06-08 07:29:17.326958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4809 vulnerable 2026-06-08 07:29:17.325308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3346 vulnerable 2026-06-08 07:23:08.701235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29137 vulnerable 2026-06-08 07:14:56.357988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29135 vulnerable 2026-06-08 07:14:56.356100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1819 vulnerable 2026-06-08 07:08:38.215344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11586 vulnerable 2026-06-08 07:04:28.554558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11528 vulnerable 2026-06-08 07:04:28.311709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11527 vulnerable 2026-06-08 07:04:28.311186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11526 vulnerable 2026-06-08 07:04:28.310630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11525 vulnerable 2026-06-08 07:04:28.310124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11524 vulnerable 2026-06-08 07:04:28.309622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11523 vulnerable 2026-06-08 07:04:28.307485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48826 vulnerable 2026-06-08 06:50:09.988998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48825 vulnerable 2026-06-08 06:50:09.986576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32301 vulnerable 2026-06-08 06:35:33.019277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32281 vulnerable 2026-06-08 06:35:33.006871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2903 vulnerable 2026-06-08 06:35:27.652725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2902 vulnerable 2026-06-08 06:35:27.651935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2901 vulnerable 2026-06-08 06:35:27.651462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2900 vulnerable 2026-06-08 06:35:27.650455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2899 vulnerable 2026-06-08 06:35:27.649891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2898 vulnerable 2026-06-08 06:35:27.649123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2897 vulnerable 2026-06-08 06:35:27.648546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2896 vulnerable 2026-06-08 06:35:27.647760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2895 vulnerable 2026-06-08 06:35:27.644734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2894 vulnerable 2026-06-08 06:35:27.644168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2893 vulnerable 2026-06-08 06:35:27.636374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2892 vulnerable 2026-06-08 06:35:27.635651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2891 vulnerable 2026-06-08 06:35:27.632640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10280 vulnerable 2026-06-08 06:22:03.913901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41562 vulnerable 2026-06-08 06:11:06.196249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41559 vulnerable 2026-06-08 06:11:06.188799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41558 vulnerable 2026-06-08 06:11:06.182058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41557 vulnerable 2026-06-08 06:11:06.181243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41556 vulnerable 2026-06-08 06:11:06.180382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41555 vulnerable 2026-06-08 06:11:06.179250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41552 vulnerable 2026-06-08 06:11:06.174495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38937 vulnerable 2026-06-08 06:09:35.553464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38936 vulnerable 2026-06-08 06:09:35.531925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38933 vulnerable 2026-06-08 06:08:19.216875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38931 vulnerable 2026-06-08 06:08:19.205310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38930 vulnerable 2026-06-08 06:08:19.180884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.