GCVE - cpe:2.3:a:tenda:a15:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:a15:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	A15 (`dda525c3-7710-51bd-92f8-168b6fbb32a0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-4897`	vulnerable	2026-06-08 07:29:17.477789	Tenda A15 HTTP POST Request multimodalAdd buffer overflow HIGH (8.8) A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-18T21:31:06.291Z Updated: 2025-05-19T14:06:27.061Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309453 https://vuldb.com/?ctiid.309453 https://vuldb.com/?submit.578035 https://github.com/byxs0x0/cve2/blob/main/tenda%20AC15.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4867`	vulnerable	2026-06-08 07:29:17.433289	Tenda A15 ArpNerworkSet formArpNerworkSet denial of service MEDIUM (6.5) A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-18T08:31:05.785Z Updated: 2025-05-19T15:22:59.553Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309409 https://vuldb.com/?ctiid.309409 https://vuldb.com/?submit.575501 https://github.com/xubeining/Cve_report/blob/main/Notification%20of%20Denial%20of%20Service%20Vulnerability%20in%20Tenda%20A15%20Router%20(Version%20V15.13.07.13)%20by%20Shenzhen%20Jixiang%20Tenda%20Technology.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0534`	vulnerable	2026-06-08 06:22:01.299418	Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow HIGH (7.2) A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250704. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-01-15T02:31:05.308Z Updated: 2025-06-17T21:19:13.612Z Open on db.gcve.eu Reference links https://vuldb.com/?id.250704 https://vuldb.com/?ctiid.250704 https://github.com/yaoyue123/iot/blob/main/Tenda/A15/SetOnlineDevName.mac.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0533`	vulnerable	2026-06-08 06:22:01.298535	Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow HIGH (7.2) A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250703. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-01-15T02:31:04.275Z Updated: 2025-06-13T19:09:23.960Z Open on db.gcve.eu Reference links https://vuldb.com/?id.250703 https://vuldb.com/?ctiid.250703 https://github.com/yaoyue123/iot/blob/main/Tenda/A15/SetOnlineDevName.devname.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0532`	vulnerable	2026-06-08 06:22:01.297794	Tenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflow HIGH (7.2) A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function set_repeat5 of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapsk_crypto2_4g/wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-01-15T02:00:07.407Z Updated: 2025-05-14T14:40:54.727Z Open on db.gcve.eu Reference links https://vuldb.com/?id.250702 https://vuldb.com/?ctiid.250702 https://vuldb.com/?submit.262690 https://github.com/yaoyue123/iot/blob/main/Tenda/A15/WifExtraSet.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0531`	vulnerable	2026-06-08 06:22:01.294999	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.