GCVE - cpe:2.3:h:tenda:ac10u:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac10u:1.0:*:*:*:*:*:*:*

part: h version: 1.0 update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac10U (`150c6767-6ca3-5bb2-ac16-f149680c2de6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-8263`	not_vulnerable	2026-06-08 08:08:58.257620	Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection MEDIUM (4.7) A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipulation of the argument mac/ssid results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-05-11T02:00:16.521Z Updated: 2026-05-11T17:31:16.800Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/362560 https://vuldb.com/vuln/362560/cti https://vuldb.com/submit/810074 https://github.com/yaoyue123/iot/blob/main/Tenda/AC10U/fromSetWirelessRepeat.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15218`	not_vulnerable	2026-06-08 07:06:35.895663	Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow HIGH (8.8) A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing a manipulation of the argument lanMask can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Published: 2025-12-30T03:32:08.254Z Updated: 2026-02-24T06:14:02.531Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338603 https://vuldb.com/?ctiid.338603 https://vuldb.com/?submit.725461 https://lavender-bicycle-a5a.notion.site/Tenda-AC10U-fromadvsetlanip-2d753a41781f800c86c8d388a38e8101?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15215`	not_vulnerable	2026-06-08 07:06:35.890556	Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow HIGH (8.8) A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Published: 2025-12-30T02:02:08.414Z Updated: 2026-02-24T06:13:19.930Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338600 https://vuldb.com/?ctiid.338600 https://vuldb.com/?submit.725365 https://www.notion.so/Tenda-AC10U-setPptpUserList-2d753a41781f80e8ba6bc37ba6100343?pvs=73 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32306`	not_vulnerable	2026-06-08 06:35:33.031198	Details available Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. Published: 2024-04-17T00:00:00.000Z Updated: 2024-08-02T02:06:44.042Z Open on db.gcve.eu Reference links https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.48/fromWizardHandle.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2853`	not_vulnerable	2026-06-08 06:35:27.521412	Tenda AC10U setsambacfg formSetSambaConf os command injection MEDIUM (6.3) A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. It has been rated as critical. This issue affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-03-24T05:00:06.892Z Updated: 2024-08-01T19:25:42.158Z Open on db.gcve.eu Reference links https://vuldb.com/?id.257777 https://vuldb.com/?ctiid.257777 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.48/more/formSetSambaConf.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2764`	not_vulnerable	2026-06-08 06:35:27.300826	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2763`	not_vulnerable	2026-06-08 06:35:27.298301	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2711`	not_vulnerable	2026-06-08 06:33:31.928241	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2705`	not_vulnerable	2026-06-08 06:33:31.921688	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2705`	vulnerable	2026-06-08 06:33:31.921582	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.