AF
Product
Ax3 Firmware
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 36Medium 1Low 0
Watch
Add Ax3 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-69764 | 9.8 | Jan 22 | Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory… Affected: 16.03.12.11 |
| CVE-2025-69766 | 9.8 | Jan 21 | Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory… Affected: 16.03.12.11 |
| CVE-2025-69763 | 9.8 | Jan 21 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution Affected: 16.03.12.11 |
| CVE-2025-69762 | 9.8 | Jan 21 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution Affected: 16.03.12.11 |
| CVE-2023-51812 | 9.8 | Jan 4 | Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /goform/SetNetControlList Affected: 16.03.12.11 |
| CVE-2023-49409 | 9.8 | Dec 7 | Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet Affected: 16.03.12.11 |
| CVE-2023-49408 | 9.8 | Dec 7 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name Affected: 16.03.12.11 |
| CVE-2023-27240 | 9.8 | Mar 15 | Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip Affected: 16.03.12.11 |
| CVE-2023-27239 | 9.8 | Mar 15 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet Affected: 16.03.12.11 |
| CVE-2023-24212 | 9.8 | Feb 23 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg Affected: 16.03.12.11 |
| CVE-2022-24995 | 9.8 | Mar 10 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime Affected: 16.03.12.10_cn |
| CVE-2021-46394 | 9.8 | Mar 4 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN Affected: 16.03.12.10 |
| CVE-2021-46393 | 9.8 | Mar 4 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN Affected: 16.03.12.10 |
| CVE-2022-24150 | 9.8 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan Affected: 16.03.12.10_cn |
| CVE-2022-24148 | 9.8 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg Affected: 16.03.12.10_cn |
| CVE-2022-24144 | 9.8 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting Affected: 16.03.12.10_cn |
| CVE-2023-47422 | 8.8 | Feb 20 | An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to… Affected: 16.03.12.11 |
| CVE-2023-27042 | 8.8 | Mar 24 | Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg Affected: 16.03.12.11 |
| CVE-2025-69765 | 7.5 | Mar 3 | Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution Affected: 16.03.12.11 |
| CVE-2025-71027 | 7.5 | Jan 13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function Affected: 16.03.12.10_cn |
| CVE-2025-71026 | 7.5 | Jan 13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function Affected: 16.03.12.10_cn |
| CVE-2025-71025 | 7.5 | Jan 13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function Affected: 16.03.12.10_cn |
| CVE-2025-71024 | 7.5 | Jan 13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function Affected: 16.03.12.10_cn |
| CVE-2025-71023 | 7.5 | Jan 13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function Affected: 16.03.12.10_cn |
| CVE-2025-63149 | 7.5 | Nov 10 | Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function Affected: 16.03.12.10 |
| CVE-2025-63455 | 7.5 | Nov 10 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function Affected: 16.03.12.10 |
| CVE-2025-63147 | 7.5 | Nov 10 | Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function Affected: 16.03.12.10 |
| CVE-2025-63152 | 7.5 | Nov 10 | Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function Affected: 16.03.12.10 |
| CVE-2025-63454 | 7.5 | Oct 31 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function Affected: 16.03.12.10_cn |
| CVE-2025-55606 | 7.5 | Aug 22 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter Affected: 16.03.12.10_cn |
| CVE-2025-55605 | 7.5 | Aug 22 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter Affected: 16.03.12.10_cn |
| CVE-2025-55603 | 7.5 | Aug 22 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter Affected: 16.03.12.10_cn |
| CVE-2023-40915 | 7.5 | Aug 25 | Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set Affected: 16.03.12.11 |
| CVE-2022-24163 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime Affected: 16.03.12.10_cn |
| CVE-2022-24162 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo Affected: 16.03.12.10_cn |
| CVE-2022-24161 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo Affected: 16.03.12.10_cn |
| CVE-2022-24160 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName Affected: 16.03.12.10_cn |
| CVE-2022-24159 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer Affected: 16.03.12.10_cn |
| CVE-2022-24158 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind Affected: 16.03.12.10_cn |
| CVE-2022-24157 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg Affected: 16.03.12.10_cn |
| CVE-2022-24156 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer Affected: 16.03.12.10_cn |
| CVE-2022-24155 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi Affected: 16.03.12.10_cn |
| CVE-2022-24154 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer Affected: 16.03.12.10_cn |
| CVE-2022-24153 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule Affected: 16.03.12.10_cn |
| CVE-2022-24152 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic Affected: 16.03.12.10_cn |
| CVE-2022-24151 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic Affected: 16.03.12.10_cn |
| CVE-2022-24149 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat Affected: 16.03.12.10_cn |
| CVE-2022-24147 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan Affected: 16.03.12.10_cn |
| CVE-2022-24146 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand Affected: 16.03.12.10_cn |
| CVE-2022-24145 | 7.5 | Feb 4 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet Affected: 16.03.12.10_cn |
