AC
Product
AC10
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 48High 32Medium 14Low 0
Watch
Add AC10 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-34571 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34570 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34569 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34568 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34567 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2025-67074 | 6.5 | Dec 17 | A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code… Affected: 16.03.10.20 |
| CVE-2025-44175 | 5.4 | May 12 | Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function Affected: 16.03.10.13 |
| CVE-2025-57220 | 5.3 | Aug 28 | An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-57219 | 5.3 | Aug 28 | Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components… Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-57218 | 5.3 | Aug 28 | Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-57217 | 5.3 | Aug 28 | Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-25458 | 4.6 | Apr 15 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2 Affected: 16.03.10.20 |
| CVE-2025-25453 | 4.6 | Apr 15 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2 Affected: 16.03.10.20 |
| CVE-2024-25373 | 4.6 | Feb 15 | Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function Affected: 16.03.10.20 |
Showing 14
