Approved changes feed: RSS · Atom
cpe:2.3:a:tenda:ac10:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac10 (65f75e03-4a76-5147-99d6-76924fe20311) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9309 |
vulnerable | 2026-06-08 07:45:22.233330 |
Tenda AC10 MD5 Hash shadow hard-coded credentials
LOW (2.5)
A vulnerability was found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /etc_ro/shadow of the component MD5 Hash Handler. Performing manipulation results in hard-coded credentials. The attack needs to be approached locally. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The exploit has been made public and could be used.
Published: 2025-08-21T16:32:08.672Z
Updated: 2025-08-21T17:31:37.142Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8178 |
vulnerable | 2026-06-08 07:45:19.755376 |
Tenda AC10 RequestsProcessLaid heap-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-26T04:32:10.022Z
Updated: 2025-07-28T16:06:16.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5629 |
vulnerable | 2026-06-08 07:37:25.345527 |
Tenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg of the component HTTP Handler. The manipulation of the argument startIp/endIp leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-05T02:00:21.084Z
Updated: 2025-06-05T14:09:40.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4896 |
vulnerable | 2026-06-08 07:29:17.475637 |
Tenda AC10 UserCongratulationsExec buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-18T21:00:08.557Z
Updated: 2025-05-19T14:06:51.238Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3161 |
vulnerable | 2026-06-08 07:23:08.358677 |
Tenda AC10 ShutdownSetAdd stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T14:31:24.730Z
Updated: 2025-04-03T14:49:05.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0528 |
vulnerable | 2026-06-08 07:02:24.786847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2856 |
vulnerable | 2026-06-08 06:35:27.531621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2581 |
vulnerable | 2026-06-08 06:33:31.603999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11248 |
vulnerable | 2026-06-08 06:23:49.189131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11061 |
vulnerable | 2026-06-08 06:23:48.641985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11056 |
vulnerable | 2026-06-08 06:23:48.630145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10280 |
vulnerable | 2026-06-08 06:22:03.918838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.