AF
Product
Ax3 Firmware
by Tenda · last CVE Mar 3, 2026
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 36Medium 1Low 0
Watch

Add Ax3 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-69764
9.8
1%
Jan 22
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory…
Affected: 16.03.12.11
CVE-2025-69766
9.8
1%
Jan 21
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory…
Affected: 16.03.12.11
CVE-2025-69763
9.8
1%
Jan 21
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution
Affected: 16.03.12.11
CVE-2025-69762
9.8
1%
Jan 21
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution
Affected: 16.03.12.11
CVE-2023-51812
9.8
1%
Jan 4
Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /goform/SetNetControlList
Affected: 16.03.12.11
CVE-2023-49409
9.8
2%
Dec 7
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet
Affected: 16.03.12.11
CVE-2023-49408
9.8
1%
Dec 7
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name
Affected: 16.03.12.11
CVE-2023-27240
9.8
3%
Mar 15
Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip
Affected: 16.03.12.11
CVE-2023-27239
9.8
1%
Mar 15
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet
Affected: 16.03.12.11
CVE-2023-24212
9.8
1%
Feb 23
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg
Affected: 16.03.12.11
CVE-2022-24995
9.8
14%
Mar 10
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime
Affected: 16.03.12.10_cn
CVE-2021-46394
9.8
3%
Mar 4
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN
Affected: 16.03.12.10
CVE-2021-46393
9.8
16%
Mar 4
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN
Affected: 16.03.12.10
CVE-2022-24150
9.8
3%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan
Affected: 16.03.12.10_cn
CVE-2022-24148
9.8
3%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg
Affected: 16.03.12.10_cn
CVE-2022-24144
9.8
19%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting
Affected: 16.03.12.10_cn
CVE-2023-47422
8.8
0%
Feb 20
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to…
Affected: 16.03.12.11
CVE-2023-27042
8.8
1%
Mar 24
Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg
Affected: 16.03.12.11
CVE-2025-69765
7.5
1%
Mar 3
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution
Affected: 16.03.12.11
CVE-2025-71027
7.5
0%
Jan 13
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function
Affected: 16.03.12.10_cn
CVE-2025-71026
7.5
0%
Jan 13
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function
Affected: 16.03.12.10_cn
CVE-2025-71025
7.5
0%
Jan 13
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function
Affected: 16.03.12.10_cn
CVE-2025-71024
7.5
0%
Jan 13
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function
Affected: 16.03.12.10_cn
CVE-2025-71023
7.5
0%
Jan 13
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function
Affected: 16.03.12.10_cn
CVE-2025-63149
7.5
0%
Nov 10
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function
Affected: 16.03.12.10
CVE-2025-63455
7.5
0%
Nov 10
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function
Affected: 16.03.12.10
CVE-2025-63147
7.5
0%
Nov 10
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function
Affected: 16.03.12.10
CVE-2025-63152
7.5
0%
Nov 10
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function
Affected: 16.03.12.10
CVE-2025-63454
7.5
0%
Oct 31
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function
Affected: 16.03.12.10_cn
CVE-2025-55606
7.5
0%
Aug 22
Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter
Affected: 16.03.12.10_cn
CVE-2025-55605
7.5
0%
Aug 22
Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter
Affected: 16.03.12.10_cn
CVE-2025-55603
7.5
0%
Aug 22
Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter
Affected: 16.03.12.10_cn
CVE-2023-40915
7.5
1%
Aug 25
Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set
Affected: 16.03.12.11
CVE-2022-24163
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime
Affected: 16.03.12.10_cn
CVE-2022-24162
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo
Affected: 16.03.12.10_cn
CVE-2022-24161
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo
Affected: 16.03.12.10_cn
CVE-2022-24160
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName
Affected: 16.03.12.10_cn
CVE-2022-24159
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer
Affected: 16.03.12.10_cn
CVE-2022-24158
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind
Affected: 16.03.12.10_cn
CVE-2022-24157
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg
Affected: 16.03.12.10_cn
CVE-2022-24156
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer
Affected: 16.03.12.10_cn
CVE-2022-24155
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi
Affected: 16.03.12.10_cn
CVE-2022-24154
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer
Affected: 16.03.12.10_cn
CVE-2022-24153
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule
Affected: 16.03.12.10_cn
CVE-2022-24152
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic
Affected: 16.03.12.10_cn
CVE-2022-24151
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic
Affected: 16.03.12.10_cn
CVE-2022-24149
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat
Affected: 16.03.12.10_cn
CVE-2022-24147
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan
Affected: 16.03.12.10_cn
CVE-2022-24146
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand
Affected: 16.03.12.10_cn
CVE-2022-24145
7.5
1%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet
Affected: 16.03.12.10_cn
Page 1 of 2 · 53 total