FAIL › dossier
tendacn
VENDOR· dossier confidence 50%
Tenda is a networking equipment vendor with a history of releasing firmware containing critical vulnerabilities, including remote code execution and buffer overflows, which pose significant risks to network security.
PROFILE
Categorynetwork equipment vendorWhat they doTenda is a vendor that manufactures wireless routers and networking equipment.
SECURITY POSTURE
Tenda has a poor security posture, evidenced by multiple critical vulnerabilities in its firmware that were exploited or could be exploited by attackers.
Notable failures
- CVE-2022-32385: Stack Overflow RCE in Tenda AC23
- CVE-2022-37176: Wi-Fi password removal vulnerability in Tenda AC6
- CVE-2022-32386: Buffer overflow in Tenda AC23
Patterns: repeated critical firmware vulnerabilities; unpatched edge-device RCEs
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-07-06 | CVE-2022-32385 | critical | Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote). |
| 2022-08-30 | CVE-2022-37176 | critical | Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard. |
| 2022-07-06 | CVE-2022-32386 | critical | Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan. |
Open questions: What is the current patch status for CVE-2022-32385 and CVE-2022-32386? · How does Tenda respond to security vulnerabilities?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-07 03:57:53.225912+00:00