Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac15_firmware:15.03.05.19_multi:*:*:*:*:*:*:*

part: o version: 15.03.05.19_multi update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc15 Firmware (105cfbfb-620c-539b-aaae-5b83f9b563c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4975 vulnerable 2026-06-08 08:07:02.737211 Tenda AC15 POST Request setcfm formSetCfm memory corruption
HIGH (8.8)
A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-27T19:52:54.501Z
Updated: 2026-03-30T18:58:54.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5851 vulnerable 2026-06-08 07:37:25.908908 Tenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been rated as critical. This issue affects the function fromadvsetlanip of the file /goform/AdvSetLanip of the component HTTP POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-08T23:31:06.668Z
Updated: 2025-06-09T03:08:15.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5850 vulnerable 2026-06-08 07:37:25.908325 Tenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been declared as critical. This vulnerability affects the function formsetschedled of the file /goform/SetLEDCf of the component HTTP POST Request Handler. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-08T23:00:20.211Z
Updated: 2025-06-09T03:09:16.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5849 vulnerable 2026-06-08 07:37:25.907643 Tenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been classified as critical. This affects the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-08T22:31:07.063Z
Updated: 2025-06-09T03:11:32.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5848 vulnerable 2026-06-08 07:37:25.906253 Tenda AC15 HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. The manipulation of the argument list leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-08T22:00:11.191Z
Updated: 2025-06-09T03:12:57.686Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.