PatchTheCVEtendacn vulnerabilities
Recent CVEs affecting tendacn products. 27 tracked.
tendacn has 27 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-14. Highest priority: CVE-2024-46628 (score 68/100).
- CVE-2025-29032 MEDIUM 5.9 MITIGATE Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.
- CVE-2024-8224 HIGH 8.8 MITIGATE A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20
- CVE-2024-7581 HIGH 8.8 MITIGATE A vulnerability classified as critical has been found in Tenda A301 15.13.08.12
- CVE-2024-6403 MEDIUM 6.5 MITIGATE A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12
- CVE-2024-6402 MEDIUM 6.5 MITIGATE A vulnerability classified as critical was found in Tenda A301 15.13.08.12
- CVE-2024-50854 HIGH 8.8 MITIGATE Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.
- CVE-2024-50853 HIGH 8.8 MITIGATE Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg
- CVE-2024-50852 HIGH 8.8 MITIGATE Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartit
- CVE-2024-46628 CRITICAL 9.8 MITIGATE Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability vi
- CVE-2024-42954 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebE
- CVE-2024-42953 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizar
- CVE-2024-42949 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqosse
- CVE-2024-42945 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromAddr
- CVE-2024-42942 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the frmL7ImF
- CVE-2024-41473 CRITICAL 9.8 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip
- CVE-2024-41468 CRITICAL 9.8 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter
- CVE-2024-41466 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page para
- CVE-2024-41465 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1
- CVE-2024-41464 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterf
- CVE-2024-41463 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys pa
- CVE-2024-41462 HIGH 7.5 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page para
- CVE-2024-41461 CRITICAL 9.8 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 par
- CVE-2024-41460 CRITICAL 9.8 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys pa
- CVE-2024-41459 CRITICAL 9.8 MITIGATE Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPass
- CVE-2024-35338 CRITICAL 9.8 MITIGATE Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.
- CVE-2024-33182 CRITICAL 9.8 MITIGATE Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the device
- CVE-2024-33180 CRITICAL 9.8 MITIGATE Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the device
FAQ
How do I fix tendacn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tendacn being exploited right now?
None of the tracked tendacn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tendacn CVE should I patch first?
CVE-2024-46628 currently ranks highest (68/100): Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability vi.