Tenda i24 Firmware vulnerabilities

6 CVEs affecting Tenda i24 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-70798, published 2026-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3820, published 2025-04-19. High severity, CVSS 8.8. EPSS: 12.7% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The…
CVE-2025-3802, published 2025-04-19. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSet of the file /bin/httpd. The…
CVE-2025-4007, published 2025-04-28. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the…
CVE-2025-3803, published 2025-04-19. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The…
CVE-2024-57483, published 2025-01-14. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
CVE-2025-70798, published 2026-03-10. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.