FAIL › dossier
ac6
PRODUCT· dossier confidence 0%
Tenda is a networking equipment vendor with a severe security history characterized by multiple critical firmware vulnerabilities, including buffer overflows and authentication bypasses that allow attackers to gain full administrative control without valid credentials.
PROFILE
Categorynetwork equipmentWhat they doTenda provides home and enterprise networking devices including routers, switches, wireless access points, and video surveillance equipment.
SECURITY POSTURE
Tenda has a poor security track record with multiple critical vulnerabilities in its firmware, including buffer overflows, authentication bypasses, and unpatched security flaws that allow attackers to gain full administrative control without valid credentials.
Notable failures
- CVE-2024-52714 buffer overflow in fromSetSysTime
- CVE-2022-37176 Wi-Fi password removal and open security mode
- CVE-2025-52221 buffer overflow in formSetCfm
- CVE-2026-11405 hidden authentication bypass in login function
Patterns: repeated unpatched buffer overflows in firmware functions; hidden authentication bypasses in web management interfaces; failure to patch critical vulnerabilities before public disclosure
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2024-11-19 | CVE-2024-52714 | critical | Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime. |
| 2022-08-30 | CVE-2022-37176 | critical | Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard. |
| 2026-04-08 | CVE-2025-52221 | critical | CVE-2025-52221: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm f |
DOSSIER SOURCES
- Our History - General Dynamics · www.gd.com
- Company Database Search · www.edgarcompany.sec.gov
- Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find · www.cvefind.com
- Armored Core 6 Update 1.010 Patch Notes (AC6 Ver 1.010.000) · updatecrazy.com
- 腾达多个版本固件现隐藏后门，攻击者可绕过密码获管理权限!-尧图网站设计 · www.mhpn.cn
Open questions: Tenda's current patching cadence for firmware vulnerabilities · Whether Tenda has implemented any security improvements since 2022
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-21 04:46:09.042850+00:00