CVE-2021-44971
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
Multiple Tenda devices are vulnerable to authentication bypass, allowing an attacker to obtain sensitive information. This vulnerability can be combined with authenticated command injection to achieve remote code execution (RCE).
Risk Assessment
The risk includes leakage of confidential data and potential takeover of the device by an attacker, which could lead to further attacks within the network.
Recommendation
It is recommended to immediately update the firmware of Tenda devices to the latest version and implement additional authentication mechanisms.
Other vulnerabilities in Tenda
See all- CVE-2026-19747Critical
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.
- CVE-2026-38063Critical
Tenda 5G03 version 5.03.02.04 (version 1.0) is vulnerable to command injection in the action_radio_on_with_ia_apn function via the ia parameter.
- CVE-2026-19749Low
A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. The RTSP/ONVIF component has missing authentication, allowing remote attacks, though the attack is considered difficult.
- CVE-2026-19748Low
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. The function CWebSessionManager_ParseSession in /user/bin/Kylin of the Kylin Web Service component has insufficient entropy in the SESSION argument, allowing remote attacks, though difficult.
- CVE-2026-5685High
The Tenda CX12L router version 16.03.53.12 has a stack-based buffer overflow in the fromAddressNat function of /goform/addressNat. Manipulation of the page argument allows remote exploitation.
Original NVD description (English source)
Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.