AF
Product
Ac500 Firmware
by Tenda · last CVE Jul 14, 2025
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 7Medium 2Low 1
Watch

Add Ac500 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3909
9.8
2%
Apr 17
Tenda AC500 execCommand formexeCommand stack-based overflow
Affected: 2.0.1.9(1307)
CVE-2024-3908
9.8
9%
Apr 17
Tenda AC500 WriteFacMac formWriteFacMac command injection
Affected: 2.0.1.9(1307)
CVE-2024-3907
9.8
2%
Apr 17
Tenda AC500 setcfm formSetCfm stack-based overflow
Affected: 2.0.1.9(1307)
CVE-2024-32318
9.8
1%
Apr 17
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function
Affected: 2.0.1.9(1307)
CVE-2023-25234
9.8
17%
Feb 27
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface
Affected: 2.0.1.9(1307)
CVE-2023-25233
9.8
1%
Feb 27
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface
Affected: 2.0.1.9(1307)
CVE-2025-7586
8.8
1%
Jul 14
Tenda AC500 setWtpData formSetAPCfg stack-based overflow
Affected: 2.0.1.9(1307)
CVE-2024-3910
8.8
2%
Apr 17
Tenda AC500 DhcpListClient fromDhcpListClient stack-based overflow
Affected: 2.0.1.9(1307)
CVE-2024-3906
8.8
2%
Apr 17
Tenda AC500 QuickIndex formQuickIndex stack-based overflow
Affected: 2.0.1.9(1307)
CVE-2024-3905
8.8
2%
Apr 17
Tenda AC500 execCommand R7WebsSecurityHandler stack-based overflow
Affected: 2.0.1.9(1307)
CVE-2024-10280
7.5
1%
Oct 23
Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference
Affected: 1.0.0.14; 1.0.0.16; 2.0.1.9(1307)
CVE-2023-46060
7.5
1%
Apr 17
A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component
Affected: 2.0.1.9
CVE-2023-25235
7.5
11%
Feb 27
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid
Affected: 2.0.1.9(1307)
CVE-2024-32316
6.5
0%
Apr 17
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpListClient function
Affected: 2.0.1.9(1307)
CVE-2024-32320
5.9
1%
Apr 17
Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function
Affected: 2.0.1.9(1307)
CVE-2024-32314
3.8
1%
Apr 17
Tenda AC500 V2.0.1.9(1307) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter
Affected: 2.0.1.9(1307)
Showing 16