https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-55613.htmlhttps://patchthecve.com/cve/CVE-2025-55613.htmlWed, 17 Jun 2026 09:41:53 +0000CRITICAL 9.8: Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.https://patchthecve.com/cve/CVE-2025-7423.htmlhttps://patchthecve.com/cve/CVE-2025-7423.htmlWed, 17 Jun 2026 10:04:55 +0000HIGH 8.8: A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file /goform/setWrlFilterList of the component httpd. The manipulation of the argument macList leads to stack-based buffer overflow. The attack cahttps://patchthecve.com/cve/CVE-2025-7422.htmlhttps://patchthecve.com/cve/CVE-2025-7422.htmlWed, 17 Jun 2026 10:04:55 +0000HIGH 8.8: A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkService of the component httpd. The manipulation of the argument week leads to stack-based buffer overflow. It is possible to launch the attack remhttps://patchthecve.com/cve/CVE-2025-7421.htmlhttps://patchthecve.com/cve/CVE-2025-7421.htmlWed, 17 Jun 2026 10:04:55 +0000HIGH 8.8: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/operateMacFilter of the component httpd. The manipulation of the argument mac leads to stack-based buffer overflow. The attack may be initiathttps://patchthecve.com/cve/CVE-2025-7420.htmlhttps://patchthecve.com/cve/CVE-2025-7420.htmlWed, 17 Jun 2026 10:04:55 +0000HIGH 8.8: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/setWrlBasicInfo of the component httpd. The manipulation of the argument extChannel leads to stack-based buffer overflow. The attack https://patchthecve.com/cve/CVE-2025-7419.htmlhttps://patchthecve.com/cve/CVE-2025-7419.htmlWed, 17 Jun 2026 10:04:55 +0000HIGH 8.8: A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setRateTest of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. It is possible to initiate the https://patchthecve.com/cve/CVE-2025-7418.htmlhttps://patchthecve.com/cve/CVE-2025-7418.htmlWed, 17 Jun 2026 10:04:55 +0000HIGH 8.8: A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform/setPing of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. The attack may be launched remhttps://patchthecve.com/cve/CVE-2025-7417.htmlhttps://patchthecve.com/cve/CVE-2025-7417.htmlWed, 17 Jun 2026 10:04:54 +0000HIGH 8.8: A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be lahttps://patchthecve.com/cve/CVE-2025-7416.htmlhttps://patchthecve.com/cve/CVE-2025-7416.htmlWed, 17 Jun 2026 10:04:54 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function fromSysToolTime of the file /goform/setSysTimeInfo of the component httpd. The manipulation of the argument Time leads to stack-based buffer overflow. It is possible to launch the attahttps://patchthecve.com/cve/CVE-2025-7415.htmlhttps://patchthecve.com/cve/CVE-2025-7415.htmlWed, 17 Jun 2026 10:04:54 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument dest leads to command injection. The attack may be initiated remhttps://patchthecve.com/cve/CVE-2025-7414.htmlhttps://patchthecve.com/cve/CVE-2025-7414.htmlWed, 17 Jun 2026 10:04:54 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection. The attack can be initiated remotely. Thttps://patchthecve.com/cve/CVE-2024-51409.htmlhttps://patchthecve.com/cve/CVE-2024-51409.htmlWed, 17 Jun 2026 08:05:41 +0000MEDIUM 6.5: Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network packet in a fixed format to a router running the corresponding version of the firmware.https://patchthecve.com/cve/CVE-2024-7152.htmlhttps://patchthecve.com/cve/CVE-2024-7152.htmlWed, 17 Jun 2026 08:19:27 +0000HIGH 8.8: A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploihttps://patchthecve.com/cve/CVE-2024-7151.htmlhttps://patchthecve.com/cve/CVE-2024-7151.htmlWed, 17 Jun 2026 08:19:27 +0000HIGH 8.8: A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been declared as critical. This vulnerability affects the function fromMacFilterSet of the file /goform/setMacFilter. The manipulation of the argument remark leads to stack-based buffer overflow. The attack can be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2024-34338.htmlhttps://patchthecve.com/cve/CVE-2024-34338.htmlWed, 17 Jun 2026 07:33:12 +0000HIGH 7.2: Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/getTraceroute. This vulnerability allows attackers to execute arbitrary commands with root privileges. Authentication is required to exploit this vulnerability.