AC
Product
AC23
by Tenda · last CVE Jan 26, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 11Medium 1Low 0
Watch

Add AC23 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-15217
8.8
1%
Dec 30
Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow
Affected: 16.03.07.52
CVE-2025-15216
8.8
1%
Dec 30
Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow
Affected: 16.03.07.52
CVE-2025-11356
8.8
1%
Oct 7
A vulnerability was found in Tenda AC23 up to 16.03.07.52
Affected: 16.03.07.52
CVE-2025-10803
8.8
1%
Sep 22
A vulnerability has been found in Tenda AC23 up to 16.03.07.52
Affected: through 16.03.07.52
CVE-2025-8060
8.8
1%
Jul 23
A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical
Affected: 16.03.07.52
CVE-2023-40798
8.8
1%
Aug 25
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow…
Affected: 16.03.07.45_cn
CVE-2023-40797
8.8
1%
Aug 25
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability
Affected: 16.03.07.45_cn
CVE-2023-40800
8.8
1%
Aug 25
The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn
Affected: 16.03.07.45_cn
CVE-2023-2649
8.8
10%
May 11
A vulnerability was found in Tenda AC23 16.03.07.45_cn
Affected: 16.03.07.45_cn
CVE-2023-24334
8.0
0%
Feb 21
A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter
Affected: 16.03.07.45_cn
CVE-2025-3167
7.5
1%
Apr 3
A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52
Affected: 16.03.07.52
Showing 11