Skip to content
COOEY

FAIL › dossier

ac23 ac2100 firmware

PRODUCT

· dossier confidence 20%

Tenda manufactures consumer networking hardware but has demonstrated a critical lack of firmware security hygiene, with multiple high-severity vulnerabilities in its AC23 router firmware disclosed in 2022. These flaws, including remote code execution and buffer overflows, indicate a pattern of unpatched edge-device vulnerabilities that pose significant risk to networked environments.

Failure events
2
Zero-days
0
RCEs
1
On KEV
0
Critical
2
Worst shame
50
PROFILE
CategoryNetworking HardwareWhat they doTenda is a manufacturer of consumer networking hardware, including Wi-Fi routers and access points. Websitehttps://www.tenda.com ↗
SECURITY POSTURE

Tenda has a poor security posture, evidenced by critical vulnerabilities in its AC23 router firmware that were publicly disclosed in 2022.

Notable failures
  • CVE-2022-32385: Critical RCE via stack overflow in AC23 v16.03.07.44
  • CVE-2022-32386: Critical buffer overflow in AC23 v16.03.07.44
Patterns: Critical unpatched firmware vulnerabilities in consumer routers; Stack overflow and buffer overflow flaws in edge-device firmware
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-07-06 CVE-2022-32385 critical Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
2022-07-06 CVE-2022-32386 critical Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
DOSSIER SOURCES
Open questions: When was Tenda founded? · What is Tenda's headquarters location? · What is Tenda's company size? · What is Tenda's ownership structure? · What is Tenda's official website?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-12 04:04:14.659078+00:00