Vulnerabilities in Tenda

807 results
Vexday analysis

O portfólio de vulnerabilidades da Tenda acumula 757 CVEs catalogadas, volume expressivo que, aliado às 116 entradas surgidas nos últimos 90 dias, indica ritmo elevado de descobertas recentes e superfície de ataque em expansão. Embora nenhuma vulnerabilidade conste no catálogo KEV da CISA — taxa abaixo da média geral do catálogo —, a existência de 130 CVEs com prova de conceito pública representa risco operacional concreto, pois reduz significativamente a barreira para exploração oportunista. O tipo de falha mais frequente é CWE-121 (stack-based buffer overflow), classe que historicamente viabiliza execução remota de código em dispositivos de rede embarcados. A CVE mais perigosa em destaque atualmente é CVE-2024-10697, com score EPSS de 0,2551, indicando probabilidade não trivial de exploração e merecedora de atenção prioritária em planos de remediação.

CVE-2025-13288HIGHTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflowEPSS 0.9%CVE-2025-9813HIGHTenda CH22 SetSambaConf formSetSambaConf buffer overflowEPSS 0.9%CVE-2024-10351HIGHTenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflowEPSS 0.9%CVE-2025-7914HIGHTenda AC6 httpd setparentcontrolinfo buffer overflowEPSS 0.9%CVE-2025-15160HIGHTenda WH450 PPTPServer stack-based overflowEPSS 0.9%CVE-2025-8940HIGHTenda AC20 saveParentControlInfo strcpy buffer overflowEPSS 0.9%CVE-2025-11586HIGHTenda AC7 setNotUpgrade stack-based overflowEPSS 0.9%CVE-2025-1895HIGHTenda TX3 setMacFilterCfg buffer overflowEPSS 0.9%CVE-2025-7747HIGHTenda FH451 POST Request WizardHandle fromWizardHandle buffer overflowEPSS 0.9%CVE-2025-7505HIGHTenda FH451 HTTP POST Request L7Prot frmL7ProtForm stack-based overflowEPSS 0.9%CVE-2025-7506HIGHTenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflowEPSS 0.9%CVE-2025-7806HIGHTenda FH451 SafeClientFilter fromSafeClientFilter stack-based overflowEPSS 0.9%CVE-2025-7805HIGHTenda FH451 PPTPUserSetting fromPptpUserSetting stack-based overflowEPSS 0.9%CVE-2025-7807HIGHTenda FH451 SafeUrlFilter fromSafeUrlFilter stack-based overflowEPSS 0.9%CVE-2025-11423CRITICALTenda CH22 SafeEmailFilter formSafeEmailFilter memory corruptionEPSS 0.9%CVE-2025-9791HIGHTenda AC20 fromAdvSetMacMtuWan stack-based overflowEPSS 0.9%CVE-2026-15692HIGHTenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflowEPSS 0.9%CVE-2026-15695HIGHTenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflowEPSS 0.9%CVE-2026-16248HIGHTenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflowEPSS 0.9%CVE-2026-13515HIGHTenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflowEPSS 0.9%