AF
Product
Ac23 Firmware
by Tenda · last CVE Jan 26, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 11Medium 1Low 0
Watch

Add Ac23 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1420
9.8
4%
Jan 26
A flaw has been found in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2026-0640
9.8
3%
Jan 6
A weakness has been identified in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2025-12596
9.8
1%
Nov 2
A security vulnerability has been detected in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2025-12595
9.8
1%
Nov 2
A weakness has been identified in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2025-9605
9.8
6%
Aug 29
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16
Affected: 16.03.08.16
CVE-2023-40799
9.8
1%
Aug 25
Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function
Affected: 16.03.07.45_cn
CVE-2023-0782
9.8
1%
Feb 11
A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical
Affected: 16.03.07.45
CVE-2022-43108
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function
Affected: 16.03.07.45_cn
CVE-2022-43101
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function
Affected: 16.03.07.45_cn
CVE-2022-43102
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function
Affected: 16.03.07.45_cn
CVE-2022-43103
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function
Affected: 16.03.07.45_cn
CVE-2022-43104
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function
Affected: 16.03.07.45_cn
CVE-2022-43105
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function
Affected: 16.03.07.45_cn
CVE-2022-43106
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function
Affected: 16.03.07.45_cn
CVE-2022-43107
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function
Affected: 16.03.07.45_cn
CVE-2025-15217
8.8
1%
Dec 30
A security flaw has been discovered in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2025-15216
8.8
1%
Dec 30
A vulnerability was identified in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2025-11356
8.8
1%
Oct 7
A vulnerability was found in Tenda AC23 up to 16.03.07.52
Affected: 16.03.07.52
CVE-2025-10803
8.8
1%
Sep 22
A vulnerability has been found in Tenda AC23 up to 16.03.07.52
Affected: through 16.03.07.52
CVE-2025-8060
8.8
1%
Jul 23
A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical
Affected: 16.03.07.52
CVE-2023-40798
8.8
1%
Aug 25
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow…
Affected: 16.03.07.45_cn
CVE-2023-40797
8.8
1%
Aug 25
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability
Affected: 16.03.07.45_cn
CVE-2023-40800
8.8
1%
Aug 25
The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn
Affected: 16.03.07.45_cn
CVE-2023-2649
8.8
10%
May 11
A vulnerability was found in Tenda AC23 16.03.07.45_cn
Affected: 16.03.07.45_cn
CVE-2023-24334
8.0
0%
Feb 21
A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter
Affected: 16.03.07.45_cn
CVE-2025-3167
7.5
1%
Apr 3
A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
CVE-2023-40802
6.5
1%
Aug 25
The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn
Affected: 16.03.07.45_cn
Showing 27