VendorsTendaac500all versions
Vulnerabilities

Tenda AC500

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2023-25234
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface.
Published 2023-02-27 · Modified
9.8EPSS 0.166
CVE-2024-3908
Tenda AC500 WriteFacMac formWriteFacMac command injection
Published 2024-04-17 · Analyzed
9.8EPSS 0.087
CVE-2024-3907
Tenda AC500 setcfm formSetCfm stack-based overflow
Published 2024-04-17 · Analyzed
9.8EPSS 0.019
CVE-2024-3909
Tenda AC500 execCommand formexeCommand stack-based overflow
Published 2024-04-17 · Analyzed
9.8EPSS 0.017
CVE-2023-25233
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
Published 2023-02-27 · Modified
9.8EPSS 0.010
CVE-2024-32318
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function.
Published 2024-04-17 · Analyzed
9.8EPSS 0.008
CVE-2024-3905
Tenda AC500 execCommand R7WebsSecurityHandler stack-based overflow
Published 2024-04-17 · Analyzed
9.0EPSS 0.018
CVE-2024-3910
Tenda AC500 DhcpListClient fromDhcpListClient stack-based overflow
Published 2024-04-17 · Analyzed
9.0EPSS 0.017
CVE-2024-3906
Tenda AC500 QuickIndex formQuickIndex stack-based overflow
Published 2024-04-17 · Analyzed
9.0EPSS 0.017
CVE-2025-7586
Tenda AC500 setWtpData formSetAPCfg stack-based overflow
Published 2025-07-14 · Analyzed
9.0EPSS 0.011
CVE-2023-25235
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.
Published 2023-02-27 · Modified
7.5EPSS 0.111
CVE-2023-46060
A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component.
Published 2024-04-17 · Analyzed
7.5EPSS 0.008
CVE-2024-10280
Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference
Published 2024-10-23 · Analyzed
7.5EPSS 0.008
CVE-2024-32316
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function.
Published 2024-04-17 · Analyzed
6.5EPSS 0.004
CVE-2024-32320
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function.
Published 2024-04-17 · Analyzed
5.9EPSS 0.006
CVE-2024-32314
Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
Published 2024-04-17 · Analyzed
3.8EPSS 0.010