tenda f3 firmware

Name: tenda f3 firmware
Brand: tenda

productUS

cpe:2.3:o:tenda:f3_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical0high1medium0low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-35391US	medium6.5	35.2% (98th)	Exploit	no fix	2021-01-01	= 12.01.01.48
CVE-2026-27514US	—	0.25% (16th)	—	no fix	2026-02-23	≤ 12.01.01.55_multi
CVE-2026-27511US	—	0.25% (16th)	—	no fix	2026-02-23	≤ 12.01.01.55_multi
CVE-2025-57573US	—	0.22% (12th)	—	no fix	2025-09-10	= 12.01.01.48
CVE-2025-57572US	—	0.22% (12th)	—	no fix	2025-09-10	= 12.01.01.48
CVE-2026-27512US	—	0.22% (12th)	—	no fix	2026-02-23	≤ 12.01.01.55_multi
CVE-2025-57571US	—	0.20% (10th)	—	no fix	2025-09-10	= 12.01.01.48
CVE-2025-57570US	—	0.20% (10th)	—	no fix	2025-09-10	= 12.01.01.48
CVE-2025-57569US	—	0.20% (10th)	—	no fix	2025-09-10	= 12.01.01.48
CVE-2026-27513US	—	0.12% (2nd)	—	no fix	2026-02-23	≤ 12.01.01.55_multi

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-425Direct Request ('Forced Browsing')1 CVEs
CWE-525Use of Web Browser Cache Containing Sensitive Information1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.