Tenda i22 Firmware vulnerabilities

17 CVEs affecting Tenda i22 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9297, published 2025-08-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-45672, published 2022-12-02. High severity, CVSS 7.5. EPSS: 9.1% chance of exploitation in the next 30 days. Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.
CVE-2024-4252, published 2024-04-27. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda i22 1.0.0.3(4687). This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based…
CVE-2024-7583, published 2024-08-07. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda i22 1.0.0.3(4687). This issue affects the function formApPortalOneKeyAuth of the file /goform/apPortalOneKeyAuth. The…
CVE-2024-7582, published 2024-08-07. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda i22 1.0.0.3(4687). This vulnerability affects the function formApPortalAccessCodeAuth of the file /goform/apPortalAccessCodeAuth. The…
CVE-2024-7585, published 2024-08-07. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as critical. Affected by this vulnerability is the function formApPortalWebAuth of the file /goform/apPortalAuth. The…
CVE-2024-7584, published 2024-08-07. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the…
CVE-2025-9297, published 2025-08-21. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing manipulation of the argument Type results in…
CVE-2024-10750, published 2024-11-04. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the file…
CVE-2022-45671, published 2022-12-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in the formSetAppFilterRule function.
CVE-2022-45670, published 2022-12-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

Latest

CVE-2022-45666, published 2022-12-20. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.
CVE-2022-45665, published 2022-12-20. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.