GCVE - cpe:2.3:h:tenda:ac23:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac23:1.0:*:*:*:*:*:*:*

part: h version: 1.0 update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac23 (`c1aba4ed-9931-5da5-8daa-d007228b2e22`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-12596`	not_vulnerable	2026-06-08 07:04:30.485453	Tenda AC23 saveParentControlInfo buffer overflow HIGH (8.8) A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Published: 2025-11-02T10:32:06.299Z Updated: 2026-02-24T06:21:11.086Z Open on db.gcve.eu Reference links https://vuldb.com/?id.330891 https://vuldb.com/?ctiid.330891 https://vuldb.com/?submit.677585 https://github.com/LX-LX88/cve/issues/9 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12595`	not_vulnerable	2026-06-08 07:04:30.483756	Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow HIGH (8.8) A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Published: 2025-11-02T10:02:07.134Z Updated: 2026-02-24T06:20:56.156Z Open on db.gcve.eu Reference links https://vuldb.com/?id.330890 https://vuldb.com/?ctiid.330890 https://vuldb.com/?submit.677581 https://github.com/LX-LX88/cve/issues/8 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10803`	not_vulnerable	2026-06-08 07:02:27.543831	Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow HIGH (8.8) A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-09-22T15:02:07.142Z Updated: 2025-09-22T17:18:36.553Z Open on db.gcve.eu Reference links https://vuldb.com/?id.325161 https://vuldb.com/?ctiid.325161 https://vuldb.com/?submit.654237 https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC23-3/Tenda%20AC23%20Buffer%20overflow.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24334`	not_vulnerable	2026-06-08 05:56:05.320897	Details available A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter. Published: 2024-02-21T00:00:00.000Z Updated: 2024-08-02T10:56:03.517Z Open on db.gcve.eu Reference links https://github.com/caoyebo/CVE/tree/main/TENDA%20AC23%20-%20CVE-2023-24334	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.