Approved changes feed: RSS · Atom
cpe:2.3:a:tenda:ac23:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac23 (c1aba4ed-9931-5da5-8daa-d007228b2e22) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9605 |
vulnerable | 2026-06-08 07:47:09.341126 |
Tenda AC21/AC23 GetParentControlInfo stack-based overflow
CRITICAL (9.8)
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-08-29T02:02:08.778Z
Updated: 2025-08-29T13:31:06.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8060 |
vulnerable | 2026-06-08 07:45:18.777380 |
Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-23T01:32:06.931Z
Updated: 2025-07-23T15:14:41.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3167 |
vulnerable | 2026-06-08 07:23:08.369507 |
Tenda AC23 API Interface VerAPIMant denial of service
MEDIUM (6.5)
A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T16:31:09.102Z
Updated: 2025-04-03T19:42:56.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10803 |
vulnerable | 2026-06-08 07:02:27.541672 |
Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-09-22T15:02:07.142Z
Updated: 2025-09-22T17:18:36.553Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2649 |
vulnerable | 2026-06-08 06:02:42.713615 |
Tenda AC23 Service Port 7329 ate command injection
HIGH (7.2)
A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The manipulation of the argument v2 leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228778 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-05-11T08:00:06.552Z
Updated: 2024-08-02T06:26:09.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0782 |
vulnerable | 2026-06-08 05:52:32.616909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.