Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac6:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc6 (6fd4a8d5-9485-5e04-a4a2-4f1d40e6bf6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57296 not_vulnerable 2026-06-08 07:33:15.859004 Details available
Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the sub_ADBC0 helper function concatenates these user-supplied values into nvram set system commands using doSystemCmd, without validating or sanitizing special characters (e.g., ;, ", #). An unauthenticated or authenticated attacker can exploit this by submitting a crafted POST request, leading to arbitrary system command execution on the affected device.
Published: 2025-09-19T00:00:00.000Z
Updated: 2025-09-19T17:58:17.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55495 not_vulnerable 2026-06-08 07:33:15.010362 Details available
Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.
Published: 2025-08-27T00:00:00.000Z
Updated: 2025-08-27T19:31:13.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50641 not_vulnerable 2026-06-08 07:31:11.006556 Details available
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId.
Published: 2025-07-01T00:00:00.000Z
Updated: 2026-04-08T17:21:40.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50528 not_vulnerable 2026-06-08 07:31:10.968985 Details available
A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter.
Published: 2025-06-27T00:00:00.000Z
Updated: 2025-06-27T19:59:17.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50263 not_vulnerable 2026-06-08 07:31:10.888498 Details available
Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter.
Published: 2025-07-03T00:00:00.000Z
Updated: 2025-07-03T13:47:41.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50262 not_vulnerable 2026-06-08 07:31:10.888093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50260 not_vulnerable 2026-06-08 07:31:10.887517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50258 not_vulnerable 2026-06-08 07:31:10.886981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46035 not_vulnerable 2026-06-08 07:25:11.197226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29031 not_vulnerable 2026-06-08 07:14:56.311972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29030 not_vulnerable 2026-06-08 07:14:56.311540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29029 not_vulnerable 2026-06-08 07:14:56.310903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25507 not_vulnerable 2026-06-08 07:12:51.205271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25505 not_vulnerable 2026-06-08 07:12:51.204608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25343 not_vulnerable 2026-06-08 07:12:51.140236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1814 not_vulnerable 2026-06-08 07:08:38.206391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0349 not_vulnerable 2026-06-08 07:02:24.424112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10698 not_vulnerable 2026-06-08 06:23:47.291039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10697 not_vulnerable 2026-06-08 06:23:47.290107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40846 vulnerable 2026-06-08 06:11:04.669437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40830 not_vulnerable 2026-06-08 06:11:04.657960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38937 vulnerable 2026-06-08 06:09:35.544334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38936 vulnerable 2026-06-08 06:09:35.501779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38933 vulnerable 2026-06-08 06:08:19.216454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38931 vulnerable 2026-06-08 06:08:19.198369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2923 not_vulnerable 2026-06-08 06:02:43.658914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26976 not_vulnerable 2026-06-08 05:57:40.502079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41485 not_vulnerable 2026-06-08 05:48:30.427457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40010 not_vulnerable 2026-06-08 05:48:22.817451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25461 not_vulnerable 2026-06-08 05:41:45.930807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25460 not_vulnerable 2026-06-08 05:41:45.930515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25459 not_vulnerable 2026-06-08 05:41:45.930131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25458 not_vulnerable 2026-06-08 05:41:45.929742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25457 not_vulnerable 2026-06-08 05:41:45.929287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25456 not_vulnerable 2026-06-08 05:41:45.928996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25455 not_vulnerable 2026-06-08 05:41:45.928710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25454 not_vulnerable 2026-06-08 05:41:45.928416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25453 not_vulnerable 2026-06-08 05:41:45.928004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25452 not_vulnerable 2026-06-08 05:41:45.927711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25451 not_vulnerable 2026-06-08 05:41:45.927417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25450 not_vulnerable 2026-06-08 05:41:45.927106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25449 not_vulnerable 2026-06-08 05:41:45.926791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25448 not_vulnerable 2026-06-08 05:41:45.926318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25447 not_vulnerable 2026-06-08 05:41:45.925903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25446 not_vulnerable 2026-06-08 05:41:45.925372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25445 not_vulnerable 2026-06-08 05:41:45.924858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40546 vulnerable 2026-06-08 05:35:18.800883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.