Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:w12_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW12 Firmware (153ec286-5a14-5081-9952-5a5a3a02f755)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10192 vulnerable 2026-06-08 07:47:13.679116 Tenda W12 httpd set_local_time_0 stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the file /bin/httpd. Such manipulation of the argument Time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-05-31T16:00:13.456Z
Updated: 2026-06-01T12:29:51.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10191 vulnerable 2026-06-08 07:47:13.678861 Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow
HIGH (8.8)
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.macList.mac causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-31T15:45:14.535Z
Updated: 2026-06-01T15:24:11.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10190 vulnerable 2026-06-08 07:47:13.678509 Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service
MEDIUM (6.5)
A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web_over_time results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2026-05-31T15:30:13.999Z
Updated: 2026-06-01T15:04:52.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10189 vulnerable 2026-06-08 07:47:13.678126 Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-05-31T15:00:14.812Z
Updated: 2026-06-01T13:28:34.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10188 vulnerable 2026-06-08 07:47:13.677803 Tenda W12 httpd cgistaKickOff stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2026-05-31T14:30:12.458Z
Updated: 2026-06-02T14:53:18.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11550 vulnerable 2026-06-08 07:04:28.479928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11549 vulnerable 2026-06-08 07:04:28.477248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.