Tenda o3 Firmware vulnerabilities

16 CVEs affecting Tenda o3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-55613, published 2025-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-7414, published 2025-07-10. High severity, CVSS 8.8. EPSS: 12.6% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The…
CVE-2025-7415, published 2025-07-10. High severity, CVSS 8.8. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component…
CVE-2024-34338, published 2024-05-14. High severity, CVSS 7.2. EPSS: 2.8% chance of exploitation in the next 30 days. Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/getTraceroute. This vulnerability allows attackers to…
CVE-2024-36604, published 2024-06-04. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root…
CVE-2024-7152, published 2024-07-27. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the…
CVE-2024-7151, published 2024-07-27. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O3 1.0.0.10(2478). It has been declared as critical. This vulnerability affects the function fromMacFilterSet of the file /goform/setMacFilter. The manipulation of…
CVE-2025-7423, published 2025-07-11. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file /goform/setWrlFilterList of the…
CVE-2025-7422, published 2025-07-11. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkService of the component httpd. The…
CVE-2025-7421, published 2025-07-11. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/operateMacFilter of the component httpd.…
CVE-2025-7420, published 2025-07-11. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/setWrlBasicInfo of the component…

Latest

CVE-2025-55613, published 2025-08-22. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.
CVE-2025-7419, published 2025-07-10. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setRateTest of the component httpd. The…
CVE-2025-7418, published 2025-07-10. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform/setPing of the component httpd. The…
CVE-2025-7417, published 2025-07-10. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the file /goform/setPingInfo of the component…
CVE-2025-7416, published 2025-07-10. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function fromSysToolTime of the file /goform/setSysTimeInfo of the component httpd. The…