Tenda Ac10u Firmware
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Tenda Ac10u Firmware.
By the Year
In 2026 there have been 0 vulnerabilities in Tenda Ac10u Firmware. Last year, in 2025 Ac10u Firmware had 2 security vulnerabilities published. Right now, Ac10u Firmware is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 2 | 8.80 |
| 2024 | 13 | 8.80 |
It may take a day or so for new Ac10u Firmware vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Tenda Ac10u Firmware Security Vulnerabilities
A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49
CVE-2025-15218
8.8 - High
- December 30, 2025
A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing a manipulation of the argument lanMask can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Classic Buffer Overflow
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49
CVE-2025-15215
8.8 - High
- December 30, 2025
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Classic Buffer Overflow
Tenda AC10U v1.0 (v15.03.06.49) Stack overflow via PPW param
CVE-2024-32306
- April 17, 2024
Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
Stack Overflow in Tenda AC10U v15.03.06.48 Device Config Endpoint
CVE-2024-30612
- March 28, 2024
Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.
Tenda AC10U 15.03.06.48 Stack Buffer Overflow in PPTP Settings
CVE-2024-2764
8.8 - High
- March 21, 2024
A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument endIP leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257601 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Critical Tenda AC10U 15.03.06.48 Remote SO in formSetCfm
CVE-2024-2763
8.8 - High
- March 21, 2024
A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.48. Affected by this issue is the function formSetCfm of the file goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257600. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Tenda AC10U 15.03.06.48 WiFi Mac Filter Stack Overflow Remote
CVE-2024-2711
8.8 - High
- March 20, 2024
A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257462 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Stack Overflow in Tenda AC10U 15.03.06.49 setSchedWifi (Remote)
CVE-2024-2710
8.8 - High
- March 20, 2024
A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257461 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Tenda AC10U 15.03.06.49 /goform/SetStaticRouteCfg VBO Remotely Exploitable
CVE-2024-2709
8.8 - High
- March 20, 2024
A vulnerability was found in Tenda AC10U 15.03.06.49. It has been classified as critical. Affected is the function fromSetRouteStatic of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257460. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Tenda AC10U 15.03.06.49 formexeCommand stack overflow (remote)
CVE-2024-2708
8.8 - High
- March 20, 2024
A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257459. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Critical OS Command Injection in Tenda AC10U 15.03.06.49 via formWriteFacMac
CVE-2024-2707
8.8 - High
- March 20, 2024
A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257458 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Shell injection
Tenda AC10U 15.03.06.49 Critical Stack Buffer Overflow via WpsStart
CVE-2024-2706
8.8 - High
- March 20, 2024
A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formWifiWpsStart of the file /goform/WifiWpsStart. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257457 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Tenda AC10U 1.0/15.03.06.49 Remote Stack Buffer Overflow formSetQosBand
CVE-2024-2705
8.8 - High
- March 20, 2024
A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257456. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Tenda AC10U 15.03.06.49: Stack Buffer Overflow in formSetFirewallCfg
CVE-2024-2704
8.8 - High
- March 20, 2024
A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257455. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Tenda AC10U 15.03.06.49 Critical Remote Stack Buffer Overflow
CVE-2024-2703
8.8 - High
- March 20, 2024
A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257454 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Memory Corruption
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Tenda Ac10u Firmware or by Tenda? Click the Watch button to subscribe.
