Ac9 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac9_firmware:15.03.05.14_multi:*:*:*:*:*:*:*
part: o version: 15.03.05.14_multi update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac9 Firmware (64d7a677-fdf1-5f2a-aab2-91a7c6277c52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-45429 |
vulnerable | 2026-06-08 07:25:11.005088 |
Details available
In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution.
Published: 2025-04-23T00:00:00.000Z
Updated: 2025-04-23T15:30:33.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45428 |
vulnerable | 2026-06-08 07:25:11.004588 |
Details available
In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
Published: 2025-04-23T00:00:00.000Z
Updated: 2025-04-23T15:27:31.015Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45427 |
vulnerable | 2026-06-08 07:25:11.004073 |
Details available
In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
Published: 2025-04-23T00:00:00.000Z
Updated: 2025-04-23T15:18:49.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14286 |
vulnerable | 2026-06-08 07:06:34.190068 |
Tenda AC9 Configuration File DownloadCfg.jpg information disclosure
MEDIUM (5.3)
A vulnerability was determined in Tenda AC9 15.03.05.14_multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-09T01:32:07.198Z
Updated: 2026-02-24T05:45:24.166Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.