Tenda AX3 Firmware 16.03.12.10
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ax3_firmware:16.03.12.10:*:*:*:*:*:*:*
part: o version: 16.03.12.10 update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ax3 Firmware (f93871bf-97fb-5db6-8a37-cf3ec480caf3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-63455 |
vulnerable | 2026-06-08 07:39:17.611116 |
Details available
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Published: 2025-11-10T00:00:00.000Z
Updated: 2025-11-10T18:46:57.066Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63152 |
vulnerable | 2026-06-08 07:39:17.281332 |
Details available
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Published: 2025-11-10T00:00:00.000Z
Updated: 2025-11-12T20:13:56.925Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63149 |
vulnerable | 2026-06-08 07:39:17.280786 |
Details available
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Published: 2025-11-10T00:00:00.000Z
Updated: 2025-11-12T20:19:46.750Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63147 |
vulnerable | 2026-06-08 07:39:17.279501 |
Details available
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Published: 2025-11-10T00:00:00.000Z
Updated: 2025-11-18T16:32:56.541Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46394 |
vulnerable | 2026-06-08 05:38:03.334632 |
Details available
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack overflow. By POSTing the page /goform/SetPptpServerCfg with proper startIp, the attacker can easily perform remote code execution with carefully crafted overflow data.
Published: 2022-03-04T13:05:00.000Z
Updated: 2024-08-04T05:02:11.538Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46393 |
vulnerable | 2026-06-08 05:38:03.333277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.