Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac10u_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc10U Firmware (5b6cb911-3b3c-55ec-99da-92811c402184)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15218 vulnerable 2026-06-08 07:06:35.895479 Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing a manipulation of the argument lanMask can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-30T03:32:08.254Z
Updated: 2026-02-24T06:14:02.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15215 vulnerable 2026-06-08 07:06:35.888671 Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow
HIGH (8.8)
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-30T02:02:08.414Z
Updated: 2026-02-24T06:13:19.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.