Login Request a demo
AF
Product
Ax3 Firmware
by Tenda · last CVE Mar 3, 2026
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities53In the news0Timeline
Severity mix
Critical 16High 36Medium 1Low 0
Severity
All severities53Critical16High36Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ax3 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-69764
9.8
1%
Jan 22
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory…
Affected: 16.03.12.11
CVE-2025-69762
9.8
1%
Jan 21
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution
Affected: 16.03.12.11
CVE-2025-69766
9.8
1%
Jan 21
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory…
Affected: 16.03.12.11
CVE-2025-69763
9.8
1%
Jan 21
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution
Affected: 16.03.12.11
CVE-2023-51812
9.8
1%
Jan 4
Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /goform/SetNetControlList
Affected: 16.03.12.11
CVE-2023-49409
9.8
2%
Dec 7
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet
Affected: 16.03.12.11
CVE-2023-49408
9.8
1%
Dec 7
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name
Affected: 16.03.12.11
CVE-2023-27240
9.8
3%
Mar 15
Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip
Affected: 16.03.12.11
CVE-2023-27239
9.8
1%
Mar 15
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet
Affected: 16.03.12.11
CVE-2023-24212
9.8
1%
Feb 23
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg
Affected: 16.03.12.11
CVE-2022-24995
9.8
14%
Mar 10
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime
Affected: 16.03.12.10_cn
CVE-2021-46394
9.8
3%
Mar 4
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN
Affected: 16.03.12.10
CVE-2021-46393
9.8
16%
Mar 4
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN
Affected: 16.03.12.10
CVE-2022-24150
9.8
3%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan
Affected: 16.03.12.10_cn
CVE-2022-24148
9.8
3%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg
Affected: 16.03.12.10_cn
CVE-2022-24144
9.8
19%
Feb 4
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting
Affected: 16.03.12.10_cn
Showing 16