VendorsTendaac1206_firmwareall versions
Vulnerabilities

Tenda ac1206 Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

44CVEs
CVE-2025-10432
Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow
Published 2025-09-15 · Analyzed
10.0EPSS 0.016
CVE-2025-9523
Tenda AC1206 GetParentControlInfo stack-based overflow
Published 2025-08-27 · Analyzed
10.0EPSS 0.011
CVE-2024-9793
Tenda AC1206 ate ate_ifconfig_set command injection
Published 2024-10-10 · Analyzed
9.8EPSS 0.231
CVE-2026-0581
Tenda AC1206 httpd BehaviorManager formBehaviorManager command injection
Published 2026-01-05 · Analyzed
9.8EPSS 0.095
CVE-2022-37810
Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.
Published 2022-08-25 · Modified
9.8EPSS 0.025
CVE-2024-10434
Tenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflow
Published 2024-10-28 · Analyzed
9.8EPSS 0.013
CVE-2022-37809
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37802
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37811
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37813
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37814
Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37803
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37815
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37808
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37801
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37812
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37804
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37798
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37805
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37816
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37799
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37800
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37806
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2022-37807
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState.
Published 2022-08-25 · Modified
9.8EPSS 0.012
CVE-2023-37710
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
Published 2023-07-10 · Modified
9.8EPSS 0.012
CVE-2023-37711
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.
Published 2023-07-10 · Modified
9.8EPSS 0.012
CVE-2023-37712
Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function.
Published 2023-07-10 · Modified
9.8EPSS 0.012
CVE-2025-4298
Tenda AC1206 setcfm formSetCfm buffer overflow
Published 2025-05-05 · Analyzed
9.8EPSS 0.011
CVE-2023-37716
Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.
Published 2023-07-14 · Modified
9.8EPSS 0.009
CVE-2023-37717
Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.
Published 2023-07-14 · Modified
9.8EPSS 0.009
CVE-2023-38935
Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.
Published 2023-08-07 · Modified
9.8EPSS 0.009
CVE-2023-38936
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
Published 2023-08-07 · Modified
9.8EPSS 0.009
CVE-2025-4299
Tenda AC1206 openSchedWifi setSchedWifi buffer overflow
Published 2025-05-06 · Analyzed
9.8EPSS 0.008
CVE-2023-38937
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.
Published 2023-08-07 · Modified
9.8EPSS 0.008
CVE-2023-38931
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.
Published 2023-08-07 · Modified
9.8EPSS 0.008
CVE-2023-38933
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
Published 2023-08-07 · Modified
9.8EPSS 0.008
CVE-2025-3328
Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow
Published 2025-04-07 · Analyzed
9.0EPSS 0.076
CVE-2025-7544
Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow
Published 2025-07-13 · Analyzed
9.0EPSS 0.017
CVE-2022-42080
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter.
Published 2022-10-12 · Modified
7.5EPSS 0.009
CVE-2022-42079
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet.
Published 2022-10-12 · Modified
7.5EPSS 0.009
1 / 2Next →