Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac9_firmware:15.03.05.19:*:*:*:*:*:*:*

part: o version: 15.03.05.19 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc9 Firmware (64d7a677-fdf1-5f2a-aab2-91a7c6277c52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9731 vulnerable 2026-06-08 07:47:09.662661 Tenda AC9 Administrative shadow hard-coded credentials
LOW (2.5)
A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation causes hard-coded credentials. It is possible to launch the attack on the local host. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized.
Published: 2025-08-31T13:32:07.821Z
Updated: 2025-09-02T15:14:30.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22949 vulnerable 2026-06-08 07:10:55.022324 Details available
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-14T14:51:26.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22946 vulnerable 2026-06-08 07:10:55.020875 Details available
Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-01-14T14:53:30.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36571 vulnerable 2026-06-08 05:46:07.566526 Details available
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting.
Published: 2022-08-31T19:03:27.000Z
Updated: 2024-08-03T10:07:34.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36570 vulnerable 2026-06-08 05:46:07.566247 Details available
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.
Published: 2022-08-31T19:03:26.000Z
Updated: 2024-08-03T10:07:34.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36569 vulnerable 2026-06-08 05:46:07.565931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36568 vulnerable 2026-06-08 05:46:07.565531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.