AC
Product
AC23
by Tenda · last CVE Jan 26, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 11Medium 1Low 0
Watch

Add AC23 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1420
9.8
4%
Jan 26
Tenda AC23 WifiExtraSet buffer overflow
Affected: 16.03.07.52
CVE-2026-0640
9.8
3%
Jan 6
Tenda AC23 PowerSaveSet sscanf buffer overflow
Affected: 16.03.07.52
CVE-2025-12596
9.8
1%
Nov 2
Tenda AC23 saveParentControlInfo buffer overflow
Affected: 16.03.07.52
CVE-2025-12595
9.8
1%
Nov 2
Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow
Affected: 16.03.07.52
CVE-2025-9605
9.8
6%
Aug 29
Tenda AC21/AC23 GetParentControlInfo stack-based overflow
Affected: 16.03.08.16
CVE-2023-40799
9.8
1%
Aug 25
Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function
Affected: 16.03.07.45_cn
CVE-2023-0782
9.8
1%
Feb 11
A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical
Affected: 16.03.07.45
CVE-2022-43108
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function
Affected: 16.03.07.45_cn
CVE-2022-43101
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function
Affected: 16.03.07.45_cn
CVE-2022-43102
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function
Affected: 16.03.07.45_cn
CVE-2022-43103
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function
Affected: 16.03.07.45_cn
CVE-2022-43104
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function
Affected: 16.03.07.45_cn
CVE-2022-43105
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function
Affected: 16.03.07.45_cn
CVE-2022-43106
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function
Affected: 16.03.07.45_cn
CVE-2022-43107
9.8
1%
Nov 3
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function
Affected: 16.03.07.45_cn
CVE-2025-15217
8.8
1%
Dec 30
Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow
Affected: 16.03.07.52
CVE-2025-15216
8.8
1%
Dec 30
Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow
Affected: 16.03.07.52
CVE-2025-11356
8.8
1%
Oct 7
Tenda AC23 SetStaticRouteCfg sscanf buffer overflow
Affected: 16.03.07.0; 16.03.07.1; 16.03.07.2; 16.03.07.3; 16.03.07.4; 16.03.07.5; +34 more
CVE-2025-10803
8.8
1%
Sep 22
Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow
Affected: through 16.03.07.52
CVE-2025-8060
8.8
1%
Jul 23
Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow
Affected: 16.03.07.52
CVE-2023-40798
8.8
1%
Aug 25
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow…
Affected: 16.03.07.45_cn
CVE-2023-40797
8.8
1%
Aug 25
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability
Affected: 16.03.07.45_cn
CVE-2023-40800
8.8
1%
Aug 25
The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn
Affected: 16.03.07.45_cn
CVE-2023-2649
8.8
10%
May 11
A vulnerability was found in Tenda AC23 16.03.07.45_cn
Affected: 16.03.07.45_cn
CVE-2023-24334
8.0
0%
Feb 21
A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter
Affected: 16.03.07.45_cn
CVE-2025-3167
7.5
1%
Apr 3
Tenda AC23 API Interface VerAPIMant denial of service
Affected: 16.03.07.52
CVE-2023-40802
6.5
1%
Aug 25
The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn
Affected: 16.03.07.45_cn
Showing 27