-
Tenda TES7002 V4.0.0: TR-069 CWMP config_default.xml Hardcoded Credentials (Unauthenticated, ACS Impersonation and Remote Management Takeover)
-
TP-LINK TL-FW5600E 1.11.2: webfilter.lua time Parameter Command Injection (Authenticated, Root RCE)
-
TP-LINK TL-IPC43AW 1.0.7: bin/main perf_test Command Injection (Post-File-Write, Root RCE)
-
Tenda TC3B14C V25.4.25.15: Kylin HAL_Awss_Connect_Ap nmcli Command Injection (Pre-Auth, Root RCE)
-
Tenda RP3 V31.1.10.91: Kylin ATE_SetCmd Command Injection (Pre-Auth, Root RCE)
-
Tenda IC7-PRS 2209020910: login.js super_yg Backdoor Account (Pre-Auth, Login Bypass and Credential Recovery)
-
Tenda W30E V2.0 V16.01.0.19: /etc_ro/passwd Hardcoded Root Credentials (Pre-Auth, Root Shell via Telnet)
-
Tenda i24 V3.0.0.8: /etc_ro/passwd Hardcoded Root Credentials (Pre-Auth, Root Access)
-
Tenda M3 V1.0.0.12: httpd goform/exeCommand Stack Buffer Overflow (Authenticated, Return Address Overwrite)
-
Tenda G3 V15.11.0.17: httpd goform/setDebugCfg Command Injection (Authenticated, Root RCE)