Shenzhen Tenda Technology vulnerabilities
We track 10 vulnerabilities in Shenzhen Tenda Technology products across 3 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on February 7, 2026.
Latest Shenzhen Tenda Technology vulnerabilities
- 8.8 High severity
Tenda G300-F: Improper Neutralization of Special Elements used in an OS Command
Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagnostic functionality (formSetWanDiag). The implementation constructs a shell command that invokes curl and incorporates attacker-controlled i
- 8.8 High severity
W30E V2: Unverified Password Change
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwords to be changed through the maintenance interface without requiring verification of the existing password. This enables unauthorized password changes when acce
- 9.8 Critical severity
W30E V2: Improper Restriction of Excessive Authentication Attempts
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate limiting or account lockout mechanisms on authentication endpoints. This allows attackers to perform unrestricted brute-force attempts against administrative cre
- 7.5 High severity
W30E V2: Insertion of Sensitive Information Into Sent Data
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in cleartext within HTTP responses generated by the maintenance interface. Because the management interface is accessible over unencrypted HTT
- 9.8 Critical severity
W30E V2: Use of Default Password
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account that is not required to be changed during initial configuration. An attacker can leverage these default
- 8.8 High severity
W30E V2: Incorrect Authorization
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user management API that allows a low-privileged authenticated user to change the administrator account password. By sending a crafted request d
- 9.8 Critical severity
Tenda AC6V2: Out-of-bounds Write
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.
- 9.8 Critical severity
Tenda AC6V2: Out-of-bounds Write
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
- 9.8 Critical severity
Tenda AC6V2: Out-of-bounds Write
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
- 9.8 Critical severity
Tenda AC6V2: Out-of-bounds Write
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50