Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac10_firmware:15.03.06.23:*:*:*:*:*:*:*

part: o version: 15.03.06.23 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc10 Firmware (94e82633-7927-50d3-8a69-db323ba3260b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25675 vulnerable 2026-06-08 07:12:51.281769 Details available
Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-02-21T17:30:19.069Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25674 vulnerable 2026-06-08 07:12:51.280203 Details available
Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-02-21T17:31:44.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38937 vulnerable 2026-06-08 06:09:35.547959 Details available
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
Published: 2023-08-07T00:00:00.000Z
Updated: 2024-10-17T14:40:31.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38936 vulnerable 2026-06-08 06:09:35.517677 Details available
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
Published: 2023-08-07T00:00:00.000Z
Updated: 2024-10-15T20:05:36.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38933 vulnerable 2026-06-08 06:08:19.216614 Details available
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
Published: 2023-08-07T00:00:00.000Z
Updated: 2024-10-17T13:51:46.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38931 vulnerable 2026-06-08 06:08:19.201078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46109 vulnerable 2026-06-08 05:50:37.715136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42171 vulnerable 2026-06-08 05:49:29.548487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42170 vulnerable 2026-06-08 05:49:29.548034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42169 vulnerable 2026-06-08 05:49:29.547613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42168 vulnerable 2026-06-08 05:49:29.547079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42167 vulnerable 2026-06-08 05:49:29.546546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42166 vulnerable 2026-06-08 05:49:29.545988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42165 vulnerable 2026-06-08 05:49:29.545507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42164 vulnerable 2026-06-08 05:49:29.544976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42163 vulnerable 2026-06-08 05:49:29.543676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.