Tenda AC15 1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac15:1.0:*:*:*:*:*:*:*

part: h version: 1.0 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc15 (a4866930-0c86-5a64-a171-b610d683ffa5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4975 not_vulnerable 2026-06-08 08:07:02.737935 Tenda AC15 POST Request setcfm formSetCfm memory corruption
HIGH (8.8)
A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-27T19:52:54.501Z
Updated: 2026-03-30T18:58:54.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24105 not_vulnerable 2026-06-08 07:51:17.140427 Details available
An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a command injection vulnerability if injected into doSystemCmd.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T14:59:43.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24103 not_vulnerable 2026-06-08 07:51:17.137743 Details available
A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-05T16:25:56.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24101 not_vulnerable 2026-06-08 07:51:17.137101 Details available
An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-02T16:02:26.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5851 not_vulnerable 2026-06-08 07:37:25.909016 Tenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been rated as critical. This issue affects the function fromadvsetlanip of the file /goform/AdvSetLanip of the component HTTP POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-08T23:31:06.668Z
Updated: 2025-06-09T03:08:15.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5850 not_vulnerable 2026-06-08 07:37:25.908429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5849 not_vulnerable 2026-06-08 07:37:25.907711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5848 not_vulnerable 2026-06-08 07:37:25.907044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30645 not_vulnerable 2026-06-08 06:35:30.654567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2855 not_vulnerable 2026-06-08 06:35:27.527676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2852 not_vulnerable 2026-06-08 06:35:27.516216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2812 not_vulnerable 2026-06-08 06:35:27.410942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2810 not_vulnerable 2026-06-08 06:35:27.409458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2809 not_vulnerable 2026-06-08 06:35:27.408647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2808 not_vulnerable 2026-06-08 06:35:27.407976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2807 not_vulnerable 2026-06-08 06:35:27.407061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2806 not_vulnerable 2026-06-08 06:35:27.406143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39673 not_vulnerable 2026-06-08 06:09:37.915809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39673 vulnerable 2026-06-08 06:09:37.913488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28557 not_vulnerable 2026-06-08 05:42:44.602062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28556 not_vulnerable 2026-06-08 05:42:44.601518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44971 not_vulnerable 2026-06-08 05:36:47.660479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.