Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac23:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc23 (c1aba4ed-9931-5da5-8daa-d007228b2e22)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1420 not_vulnerable 2026-06-08 07:49:08.526207 Tenda AC23 WifiExtraSet buffer overflow
HIGH (8.8)
A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-01-26T05:02:07.727Z
Updated: 2026-02-23T08:56:57.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0640 not_vulnerable 2026-06-08 07:47:12.831527 Tenda AC23 PowerSaveSet sscanf buffer overflow
HIGH (8.8)
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-06T15:32:08.760Z
Updated: 2026-02-23T08:21:03.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9605 not_vulnerable 2026-06-08 07:47:09.345756 Tenda AC21/AC23 GetParentControlInfo stack-based overflow
CRITICAL (9.8)
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-08-29T02:02:08.778Z
Updated: 2025-08-29T13:31:06.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8060 not_vulnerable 2026-06-08 07:45:18.779174 Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-23T01:32:06.931Z
Updated: 2025-07-23T15:14:41.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3167 not_vulnerable 2026-06-08 07:23:08.371013 Tenda AC23 API Interface VerAPIMant denial of service
MEDIUM (6.5)
A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T16:31:09.102Z
Updated: 2025-04-03T19:42:56.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15217 not_vulnerable 2026-06-08 07:06:35.895097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15216 not_vulnerable 2026-06-08 07:06:35.894296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11356 not_vulnerable 2026-06-08 07:02:28.634632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40802 not_vulnerable 2026-06-08 06:11:04.626566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40802 vulnerable 2026-06-08 06:11:04.626263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40801 vulnerable 2026-06-08 06:11:04.625626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40800 not_vulnerable 2026-06-08 06:11:04.624960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40800 vulnerable 2026-06-08 06:11:04.624716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40799 not_vulnerable 2026-06-08 06:11:04.624410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40799 vulnerable 2026-06-08 06:11:04.624220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40798 not_vulnerable 2026-06-08 06:11:04.623880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40798 vulnerable 2026-06-08 06:11:04.623778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40797 not_vulnerable 2026-06-08 06:11:04.623264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40797 vulnerable 2026-06-08 06:11:04.621953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2649 not_vulnerable 2026-06-08 06:02:42.715223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0782 not_vulnerable 2026-06-08 05:52:32.618653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43108 not_vulnerable 2026-06-08 05:49:31.129423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43107 not_vulnerable 2026-06-08 05:49:31.128830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43106 not_vulnerable 2026-06-08 05:49:31.128316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43105 not_vulnerable 2026-06-08 05:49:31.127872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43104 not_vulnerable 2026-06-08 05:49:31.127329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43103 not_vulnerable 2026-06-08 05:49:31.126944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43102 not_vulnerable 2026-06-08 05:49:31.126266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43101 not_vulnerable 2026-06-08 05:49:31.125441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.