Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ac1206:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc1206 (5076a1d1-856e-5f1b-87ed-fd0618213306)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9523 vulnerable 2026-06-08 07:45:22.605556 Tenda AC1206 GetParentControlInfo stack-based overflow
CRITICAL (9.8)
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2025-08-27T10:32:07.976Z
Updated: 2025-08-27T13:22:13.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7544 vulnerable 2026-06-08 07:45:17.631248 Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC1206 15.03.06.23. It has been rated as critical. This issue affects the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-13T21:32:07.187Z
Updated: 2025-07-15T19:53:10.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4299 vulnerable 2026-06-08 07:29:15.995874 Tenda AC1206 openSchedWifi setSchedWifi buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T00:00:07.726Z
Updated: 2025-05-06T13:40:44.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4298 vulnerable 2026-06-08 07:29:15.992503 Tenda AC1206 setcfm formSetCfm buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-05T23:31:05.551Z
Updated: 2025-05-06T02:45:01.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3328 vulnerable 2026-06-08 07:23:08.672777 Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-04-07T00:31:07.509Z
Updated: 2025-04-07T14:01:25.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10432 vulnerable 2026-06-08 07:02:26.855681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9793 vulnerable 2026-06-08 07:00:28.671079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10434 vulnerable 2026-06-08 06:23:46.541475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10280 vulnerable 2026-06-08 06:22:03.922108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.