Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:cx12l_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductCx12L Firmware (27e38845-1dcb-5fa1-96bf-ded1aa05ac6c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11504 vulnerable 2026-07-29 00:23:31.292367 Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /goform/openSchedWifi of the component Wi-Fi Schedule Configuration Endpoint. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Published: 2026-06-08T10:00:13.594Z
Updated: 2026-06-08T12:57:17.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11503 vulnerable 2026-07-29 00:23:31.292022 Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow
HIGH (8.8)
A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set of the component Wi-Fi Configuration Endpoint. Such manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-06-08T09:45:12.620Z
Updated: 2026-06-08T16:22:19.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8138 vulnerable 2026-06-08 08:08:58.141303 Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2026-05-08T04:15:10.228Z
Updated: 2026-05-08T10:35:06.800Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.