Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac8_firmware:16.03.34.09:*:*:*:*:*:*:*

part: o version: 16.03.34.09 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc8 Firmware (a871dd0f-3648-5093-a582-a89ef439c0b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5799 vulnerable 2026-06-08 07:37:25.736450 Tenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-06T19:31:11.477Z
Updated: 2025-06-09T15:09:23.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5798 vulnerable 2026-06-08 07:37:25.735081 Tenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-06T19:31:07.341Z
Updated: 2025-06-09T15:10:10.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4066 vulnerable 2026-06-08 06:50:16.954382 Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261792. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-23T21:00:08.132Z
Updated: 2024-08-01T20:26:57.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4065 vulnerable 2026-06-08 06:50:16.952023 Tenda AC8 SetRebootTimer formSetRebootTimer stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-23T20:00:07.093Z
Updated: 2024-08-01T20:26:57.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4064 vulnerable 2026-06-08 06:50:16.950207 Tenda AC8 execCommand R7WebsSecurityHandler stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-261790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-23T20:00:05.584Z
Updated: 2024-09-03T18:17:48.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11745 vulnerable 2026-06-08 06:23:50.335466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10280 vulnerable 2026-06-08 06:22:03.936999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48194 vulnerable 2026-06-08 06:14:26.128234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.