Skip to content
COOEY

FAIL › dossier

ac23 ac2100

PRODUCT

· dossier confidence 50%

Tenda is a Chinese networking hardware vendor whose firmware has been found to contain critical remote code execution and buffer overflow vulnerabilities, indicating a severe lack of secure development and patching practices for its edge devices.

Failure events
2
Zero-days
0
RCEs
1
On KEV
0
Critical
2
Worst shame
50
PROFILE
Categorynetworking hardwareWhat they doTenda produces wireless routers and networking equipment.
SECURITY POSTURE

Tenda's security posture is critically weak, evidenced by the release of firmware with critical remote code execution and buffer overflow vulnerabilities that were publicly disclosed in July 2022.

Notable failures
  • CVE-2022-32385: Stack Overflow RCE in Tenda AC23 v16.03.07.44
  • CVE-2022-32386: Buffer overflow in Tenda AC23 v16.03.07.44
Patterns: critical unpatched firmware vulnerabilities; lack of timely security updates for edge devices
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-07-06 CVE-2022-32385 critical Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
2022-07-06 CVE-2022-32386 critical Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
Open questions: When was Tenda founded? · What is Tenda's headquarters location? · What is Tenda's company size? · What is Tenda's ownership structure? · What is Tenda's official website?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-08 03:53:50.595950+00:00