Vulnerabilities in Tenda

807 results
Vexday analysis

O portfólio de vulnerabilidades da Tenda acumula 757 CVEs catalogadas, volume expressivo que, aliado às 116 entradas surgidas nos últimos 90 dias, indica ritmo elevado de descobertas recentes e superfície de ataque em expansão. Embora nenhuma vulnerabilidade conste no catálogo KEV da CISA — taxa abaixo da média geral do catálogo —, a existência de 130 CVEs com prova de conceito pública representa risco operacional concreto, pois reduz significativamente a barreira para exploração oportunista. O tipo de falha mais frequente é CWE-121 (stack-based buffer overflow), classe que historicamente viabiliza execução remota de código em dispositivos de rede embarcados. A CVE mais perigosa em destaque atualmente é CVE-2024-10697, com score EPSS de 0,2551, indicando probabilidade não trivial de exploração e merecedora de atenção prioritária em planos de remediação.

CVE-2026-2180HIGHTenda RX3 fast_setting_wifi_set stack-based overflowEPSS 0.6%CVE-2026-5527MEDIUMTenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded keyEPSS 0.6%CVE-2026-2148MEDIUMTenda AC21 Web Management DownloadFlash information disclosureEPSS 0.6%CVE-2025-15008MEDIUMTenda WH450 HTTP Request L7Port stack-based overflowEPSS 0.5%CVE-2026-2147MEDIUMTenda AC21 Web Management DownloadLog information disclosureEPSS 0.5%CVE-2026-10189HIGHTenda W12 httpd cgiSysTimeInfoSet stack-based overflowEPSS 0.5%CVE-2026-10192HIGHTenda W12 httpd set_local_time_0 stack-based overflowEPSS 0.5%CVE-2026-19748MEDIUMTenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropyEPSS 0.5%CVE-2025-5864MEDIUMTenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authenticationEPSS 0.5%CVE-2026-11553HIGHTenda HG7HG9/HG10 formPPPEdit stack-based overflowEPSS 0.5%CVE-2026-10191HIGHTenda W12 httpd cgiWifiMacFilterSet stack-based overflowEPSS 0.5%CVE-2026-11557HIGHTenda F451 Web Management Natlimit fromNatlimit stack-based overflowEPSS 0.5%CVE-2026-10188HIGHTenda W12 httpd cgistaKickOff stack-based overflowEPSS 0.5%CVE-2026-11523HIGHTenda W20E Web Management PortalAuth formPortalAuth stack-based overflowEPSS 0.5%CVE-2026-11504HIGHTenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflowEPSS 0.5%CVE-2026-11524HIGHTenda W20E Web Management modifyWifiFilterRules stack-based overflowEPSS 0.5%CVE-2023-4498—Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem RouterEPSS 0.5%CVE-2026-11503HIGHTenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowEPSS 0.5%CVE-2026-11528HIGHTenda AC18 Web Management getRebootStatus sub_45304 stack-based overflowEPSS 0.5%CVE-2026-11522HIGHTenda W20E setPortMirror formSetPortMirror stack-based overflowEPSS 0.5%