GCVE - cpe:2.3:a:tenda:ac7:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ac7:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac7 (`9112a2dc-e86f-5f6f-bd07-fef2543827b3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9023`	vulnerable	2026-06-08 07:45:21.600215	Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow HIGH (8.8) A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-15T08:32:07.431Z Updated: 2025-08-15T16:01:28.497Z Open on db.gcve.eu Reference links https://vuldb.com/?id.320088 https://vuldb.com/?ctiid.320088 https://vuldb.com/?submit.629692 https://vuldb.com/?submit.629696 https://github.com/zezhifu1/cve_report/blob/main/AC7/formsetschedled.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8017`	vulnerable	2026-06-08 07:45:18.675596	Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow HIGH (8.8) A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-22T13:32:07.104Z Updated: 2025-07-22T13:47:43.904Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317220 https://vuldb.com/?ctiid.317220 https://vuldb.com/?submit.619364 https://github.com/Thir0th/Thir0th-CVE/blob/main/Tenda_AC7%20V1.0_V15.03.06.44%20has%20a%20stack%20overflow%20vulnerability%20in%20parse_macfilter_rule.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5862`	vulnerable	2026-06-08 07:37:25.933053	Tenda AC7 setPptpUserList formSetPPTPUserList buffer overflow HIGH (8.8) A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T05:00:20.243Z Updated: 2025-06-09T13:23:57.463Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311621 https://vuldb.com/?ctiid.311621 https://vuldb.com/?submit.591980 https://lavender-bicycle-a5a.notion.site/Tenda-AC7-formSetPPTPUserList-20a53a41781f806ca124cbdf99bff931?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5861`	vulnerable	2026-06-08 07:37:25.929969	Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflow HIGH (8.8) A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T04:31:06.939Z Updated: 2025-06-09T13:24:28.589Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311620 https://vuldb.com/?ctiid.311620 https://vuldb.com/?submit.591960 https://lavender-bicycle-a5a.notion.site/Tenda-AC7-fromadvsetlanip-20a53a41781f80038f4fc4b9d927eb9a?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4810`	vulnerable	2026-06-08 07:29:17.326815	Tenda AC7 SetRebootTimer formSetRebootTimer stack-based overflow HIGH (8.8) A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument reboot_time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-16T20:31:06.542Z Updated: 2025-05-17T02:25:49.517Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309265 https://vuldb.com/?ctiid.309265 https://vuldb.com/?submit.573643 https://lavender-bicycle-a5a.notion.site/Tenda-AC7-formSetRebootTimer-1ed53a41781f80f78851c1c9dfc4f216?pvs=4 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4809`	vulnerable	2026-06-08 07:29:17.324392	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3346`	vulnerable	2026-06-08 07:23:08.700272	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1851`	vulnerable	2026-06-08 07:08:38.341804	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2903`	vulnerable	2026-06-08 06:35:27.652596	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2902`	vulnerable	2026-06-08 06:35:27.651980	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2901`	vulnerable	2026-06-08 06:35:27.651435	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2900`	vulnerable	2026-06-08 06:35:27.650492	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2899`	vulnerable	2026-06-08 06:35:27.649864	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2898`	vulnerable	2026-06-08 06:35:27.649165	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2897`	vulnerable	2026-06-08 06:35:27.648397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2896`	vulnerable	2026-06-08 06:35:27.647729	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2895`	vulnerable	2026-06-08 06:35:27.644779	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2894`	vulnerable	2026-06-08 06:35:27.644131	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2893`	vulnerable	2026-06-08 06:35:27.636506	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2892`	vulnerable	2026-06-08 06:35:27.635510	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2891`	vulnerable	2026-06-08 06:35:27.633736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10280`	vulnerable	2026-06-08 06:22:03.917226	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Ac7

PURL mappings

Vulnerability references

Contribute