AC
Product
AC23
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 1Low 0
Watch
Add AC23 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-10803 | 8.8 | Sep 22 | Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow Affected: 16.03.07.0; 16.03.07.1; 16.03.07.2; 16.03.07.3; 16.03.07.4; 16.03.07.5; +34 more |
| CVE-2025-8060 | 8.8 | Jul 23 | Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow Affected: 16.03.07.52 |
| CVE-2023-40801 | 8.8 | Aug 25 | The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn Affected: v16.03.07.45_cn |
| CVE-2023-40797 | 8.8 | Aug 25 | In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability Affected: 16.03.07.45_cn |
| CVE-2023-40798 | 8.8 | Aug 25 | In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow… Affected: 16.03.07.45_cn |
| CVE-2023-40800 | 8.8 | Aug 25 | The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn Affected: 16.03.07.45_cn |
| CVE-2023-2649 | 8.8 | May 11 | Tenda AC23 Service Port 7329 ate command injection Affected: 16.03.07.45_cn |
| CVE-2025-3167 | 7.5 | Apr 3 | Tenda AC23 API Interface VerAPIMant denial of service Affected: 16.03.07.52 |
Showing 8