Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac15_firmware:15.13.07.13:*:*:*:*:*:*:*

part: o version: 15.13.07.13 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc15 Firmware (105cfbfb-620c-539b-aaae-5b83f9b563c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8979 vulnerable 2026-06-08 07:45:21.541587 Tenda AC15 Firmware Update check_fw data authenticity
MEDIUM (6.6)
A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function check_fw_type/split_fireware/check_fw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-08-14T19:32:07.086Z
Updated: 2025-08-14T19:53:24.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29462 vulnerable 2026-06-08 07:14:56.464459 Details available
A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack.
Published: 2025-04-03T00:00:00.000Z
Updated: 2025-04-07T14:54:47.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0566 vulnerable 2026-06-08 07:02:24.868197 Tenda AC15 SetDevNetName formSetDevNetName stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-19T06:31:12.505Z
Updated: 2025-01-21T15:07:57.295Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.