Tenda AC23 Firmware 16.03.07.52
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac23_firmware:16.03.07.52:*:*:*:*:*:*:*
part: o version: 16.03.07.52 update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac23 Firmware (61e45848-bf35-5722-9df3-cdceb2271649) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1420 |
vulnerable | 2026-06-08 07:49:08.525249 |
Tenda AC23 WifiExtraSet buffer overflow
HIGH (8.8)
A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-01-26T05:02:07.727Z
Updated: 2026-02-23T08:56:57.929Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0640 |
vulnerable | 2026-06-08 07:47:12.831476 |
Tenda AC23 PowerSaveSet sscanf buffer overflow
HIGH (8.8)
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-06T15:32:08.760Z
Updated: 2026-02-23T08:21:03.636Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8060 |
vulnerable | 2026-06-08 07:45:18.778304 |
Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-23T01:32:06.931Z
Updated: 2025-07-23T15:14:41.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3167 |
vulnerable | 2026-06-08 07:23:08.370286 |
Tenda AC23 API Interface VerAPIMant denial of service
MEDIUM (6.5)
A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T16:31:09.102Z
Updated: 2025-04-03T19:42:56.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15217 |
vulnerable | 2026-06-08 07:06:35.894972 |
Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow
HIGH (8.8)
A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remotely.
Published: 2025-12-30T03:02:07.501Z
Updated: 2026-02-24T06:13:47.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15216 |
vulnerable | 2026-06-08 07:06:35.893611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12596 |
vulnerable | 2026-06-08 07:04:30.485421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12595 |
vulnerable | 2026-06-08 07:04:30.483150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11356 |
vulnerable | 2026-06-08 07:02:28.633369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.