Approved changes feed: RSS · Atom
cpe:2.3:h:tenda:f3:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | F3 (25a0b375-c11c-5271-a2d1-959d25cab322) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27514 |
not_vulnerable | 2026-06-08 07:53:22.406139 |
Tenda F3 Plaintext Credential Exposure in Configuration Download
MEDIUM (6.5)
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in the configuration download functionality. The configuration download response includes the router password and administrative password in plaintext. The endpoint also omits appropriate Cache-Control directives, which can allow the response to be stored in client-side caches and recovered by other local users or processes with access to cached browser data.
Published: 2026-02-23T16:27:38.171Z
Updated: 2026-05-11T23:11:27.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27513 |
not_vulnerable | 2026-06-08 07:53:22.405727 |
Tenda F3 CSRF in Web Management Interface
MEDIUM (4.3)
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement anti-CSRF protections, allowing an attacker to induce an authenticated administrator to submit state-changing requests, which can result in unauthorized configuration changes.
Published: 2026-02-23T16:26:51.559Z
Updated: 2026-05-11T23:11:26.401Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27512 |
not_vulnerable | 2026-06-08 07:53:22.405217 |
Tenda F3 Reflected Script Execution via Missing nosniff Header
MEDIUM (6.1)
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface. Responses omit the X-Content-Type-Options: nosniff header and include attacker-influenced content that can be reflected into the response body. Under affected browser behaviors, MIME sniffing may cause the response to be interpreted as active HTML, enabling script execution in the context of the administrative interface.
Published: 2026-02-23T16:26:20.398Z
Updated: 2026-05-25T23:41:48.753Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27511 |
not_vulnerable | 2026-06-08 07:53:22.404542 |
Tenda F3 Clickjacking in Web Management Interface
MEDIUM (4.3)
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.
Published: 2026-02-23T16:25:49.077Z
Updated: 2026-05-11T23:11:24.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57573 |
not_vulnerable | 2026-06-08 07:33:15.949770 |
Details available
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi.
Published: 2025-09-10T00:00:00.000Z
Updated: 2026-07-05T01:13:33.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57572 |
not_vulnerable | 2026-06-08 07:33:15.949507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57571 |
not_vulnerable | 2026-06-08 07:33:15.949142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57570 |
not_vulnerable | 2026-06-08 07:33:15.948652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57569 |
not_vulnerable | 2026-06-08 07:33:15.948023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35391 |
not_vulnerable | 2026-06-08 05:25:01.064612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.