Tenda AX1803 Firmware vulnerabilities

60 CVEs affecting Tenda AX1803 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1329, published 2026-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-4236, published 2024-04-26. High severity, CVSS 8.8. EPSS: 14.9% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /goform/SetDDNSCfg. The manipulation of the…
CVE-2023-49043, published 2023-11-27. Critical severity, CVSS 9.8. EPSS: 13.2% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.
CVE-2022-28572, published 2022-05-02. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function
CVE-2022-34596, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-34595, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.
CVE-2022-40876, published 2022-10-27. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).
CVE-2023-51972, published 2024-01-10. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.
CVE-2022-30040, published 2022-05-11. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access…
CVE-2023-49040, published 2023-11-27. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
CVE-2023-49044, published 2023-11-27. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.

Latest

CVE-2026-1329, published 2026-01-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument…
CVE-2025-70648, published 2026-01-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a…
CVE-2025-70646, published 2026-01-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a…
CVE-2025-70651, published 2026-01-21. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-63457, published 2025-11-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a…
CVE-2025-63456, published 2025-11-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a…
CVE-2025-63458, published 2025-10-31. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of…
CVE-2025-7598, published 2025-07-14. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation…
CVE-2025-7597, published 2025-07-14. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument…