AF
Product
Ac23 Firmware
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 11Medium 1Low 0
Watch
Add Ac23 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1420 | 9.8 | Jan 26 | A flaw has been found in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2026-0640 | 9.8 | Jan 6 | A weakness has been identified in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2025-12596 | 9.8 | Nov 2 | A security vulnerability has been detected in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2025-12595 | 9.8 | Nov 2 | A weakness has been identified in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2025-9605 | 9.8 | Aug 29 | A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16 Affected: 16.03.08.16 |
| CVE-2023-40799 | 9.8 | Aug 25 | Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function Affected: 16.03.07.45_cn |
| CVE-2023-0782 | 9.8 | Feb 11 | A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical Affected: 16.03.07.45 |
| CVE-2022-43108 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function Affected: 16.03.07.45_cn |
| CVE-2022-43101 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function Affected: 16.03.07.45_cn |
| CVE-2022-43102 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function Affected: 16.03.07.45_cn |
| CVE-2022-43103 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function Affected: 16.03.07.45_cn |
| CVE-2022-43104 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function Affected: 16.03.07.45_cn |
| CVE-2022-43105 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function Affected: 16.03.07.45_cn |
| CVE-2022-43106 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function Affected: 16.03.07.45_cn |
| CVE-2022-43107 | 9.8 | Nov 3 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function Affected: 16.03.07.45_cn |
| CVE-2025-15217 | 8.8 | Dec 30 | A security flaw has been discovered in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2025-15216 | 8.8 | Dec 30 | A vulnerability was identified in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2025-11356 | 8.8 | Oct 7 | A vulnerability was found in Tenda AC23 up to 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2025-10803 | 8.8 | Sep 22 | A vulnerability has been found in Tenda AC23 up to 16.03.07.52 Affected: through 16.03.07.52 |
| CVE-2025-8060 | 8.8 | Jul 23 | A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical Affected: 16.03.07.52 |
| CVE-2023-40798 | 8.8 | Aug 25 | In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow… Affected: 16.03.07.45_cn |
| CVE-2023-40797 | 8.8 | Aug 25 | In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability Affected: 16.03.07.45_cn |
| CVE-2023-40800 | 8.8 | Aug 25 | The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn Affected: 16.03.07.45_cn |
| CVE-2023-2649 | 8.8 | May 11 | A vulnerability was found in Tenda AC23 16.03.07.45_cn Affected: 16.03.07.45_cn |
| CVE-2023-24334 | 8.0 | Feb 21 | A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter Affected: 16.03.07.45_cn |
| CVE-2025-3167 | 7.5 | Apr 3 | A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52 Affected: 16.03.07.52 |
| CVE-2023-40802 | 6.5 | Aug 25 | The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn Affected: 16.03.07.45_cn |
Showing 27
