ac23_firmware vulnerabilities
CVEs whose affected-version data names the ac23_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2025-15217High· 8.8A security flaw has been discovered in Tenda AC23 16.03.07.52
A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack…
CVE-2025-15216High· 8.8A vulnerability was identified in Tenda AC23 16.03.07.52
A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based buffer overflow. It is possible to laun…
CVE-2025-11356High· 8.8A vulnerability was found in Tenda AC23 up to 16.03.07.52
A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch th…