Tenda AX3 Firmware vulnerabilities

53 CVEs affecting Tenda AX3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-69765, published 2026-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-24144, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 18.5% chance of exploitation in the next 30 days. Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting. This vulnerability allows attackers to execute arbitrary commands via the…
CVE-2021-46393, published 2022-03-04. Critical severity, CVSS 9.8. EPSS: 15.9% chance of exploitation in the next 30 days. There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v10 variable is directly retrieved from the http request parameter startIp.…
CVE-2022-24995, published 2022-03-10. Critical severity, CVSS 9.8. EPSS: 13.6% chance of exploitation in the next 30 days. Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2023-27240, published 2023-03-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip.
CVE-2021-46394, published 2022-03-04. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v13 variable is directly retrieved from the http request parameter startIp.…
CVE-2022-24150, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan. This vulnerability allows attackers to execute arbitrary commands via the…
CVE-2022-24148, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg. This vulnerability allows attackers to execute arbitrary commands via the dmzIp…
CVE-2023-49409, published 2023-12-07. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2022-24163, published 2022-02-04. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
CVE-2022-24162, published 2022-02-04. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time…

Latest

CVE-2025-69765, published 2026-03-03. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution.
CVE-2025-69764, published 2026-01-22. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and…
CVE-2025-69766, published 2026-01-21. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and…
CVE-2025-69763, published 2026-01-21. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.
CVE-2025-69762, published 2026-01-21. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution.
CVE-2025-71027, published 2026-01-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-71026, published 2026-01-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-71025, published 2026-01-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-71024, published 2026-01-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of…
CVE-2025-71023, published 2026-01-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS)…