ZeusQA
Start free

Known exploited vulnerabilities

Tenda vulnerabilities attackers have used

Every Tenda vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Tenda vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2021-31755, added Nov 3, 2021. AC11 Router has the most entries (1).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

AC11 Router (1), AC1900 Router AC15 Model (1), AC7, AC9, and AC10 Routers (1).

Every Tenda entry in CISA KEV

  1. CVE-2021-31755

    Added · due

    Tenda AC11 Router Stack Buffer Overflow Vulnerability

    Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.

  2. CVE-2020-10987

    Added · due

    Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

    Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.

  3. CVE-2018-14558

    Added · due

    Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

    Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works