Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Tenda AX3Buffer Overflow

Risk 86
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter.

First published (updated )
CVE-2025-55606

Tenda AX3Buffer Overflow

Risk 86
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter.

First published (updated )
CVE-2025-55605

Tenda AX3Buffer Overflow

Risk 86
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter.

First published (updated )
CVE-2025-55603

Tenda AX3 firmwareTenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime.…

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.

First published (updated )
CVE-2022-24995

Tenda AX3 firmwareCommand Injection

Risk 86
Severity
9.8
Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp parameter.

First published (updated )
CVE-2022-24148

Tenda AX3 firmwareCommand Injection

Risk 86
Severity
9.8
Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the gateway, dns1, and dns2 parameters.

First published (updated )
CVE-2022-24144

Tenda AX3 firmwareCommand Injection

Risk 86
Severity
9.8
Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tenda AX3 v16.03.12.10CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the remoteIp parameter.

First published (updated )
CVE-2022-24150

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203