How many Tenda 4g300 firmware CVEs are in CISA KEV?

None of Tenda 4g300 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Tenda 4g300 firmware are affected?

2 distinct Tenda 4g300 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tenda 4g300 firmware CVEs?

Tenda 4g300 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

How many critical Tenda 4g300 firmware vulnerabilities are there?

Tenda 4g300 firmware has 5 critical and 6 high-severity CVEs.

What is the average severity of Tenda 4g300 firmware CVEs?

The average CVSS base score across Tenda 4g300 firmware's scored CVEs is 8.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Tenda

12 CVEs

Tenda 4g300 firmware Vulnerabilities

Name: Tenda 4g300 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for 4g300 firmware by Tenda.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

12

Public exploits

PoC or exploit code

8.9

Avg CVSS

2023–2026

Last updated April 30, 2026

Overview

Tenda 4g300 firmware has 12 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 8.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Tenda 4g300 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include 4g300.

Severity and exploitation

How the CVSS severity of Tenda 4g300 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High6

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tenda 4g300 firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

12

12 of Tenda 4g300 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Tenda 4g300 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.01.42 <= v <= 1.01.426 CVEs
>= 1.01.422 CVEs

Find a version

12 CVEs

Sort

Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow
CVE-2026-7470
Public exploit
CWE-119
High · CVSS 8.7
EPSS 0.5% (41th pct)2026-04-30
Tenda 4G300 DelFil sub_425A28 command injection
CVE-2026-7469
Public exploit
CWE-77
Medium · CVSS 5.3
EPSS 1.3% (68th pct)2026-04-30
High vulnerability · 2024-04-25
CVE-2024-4170
Public exploit
CWE-121
High · CVSS 8.8
EPSS 1.7% (75th pct)2024-04-25
Tenda 4G300 sub_4279CC stack-based overflow
CVE-2024-4169
Public exploit
CWE-121
High · CVSS 8.8
EPSS 1.8% (76th pct)2024-04-25
High vulnerability · 2024-04-25
CVE-2024-4168
Public exploit
CWE-121
High · CVSS 8.8
EPSS 1.8% (76th pct)2024-04-25
High vulnerability · 2024-04-25
CVE-2024-4167
Public exploit
CWE-121
High · CVSS 8.8
EPSS 1.8% (76th pct)2024-04-25
High vulnerability · 2024-04-25
CVE-2024-4166
Public exploit
CWE-121
High · CVSS 8.8
EPSS 1.8% (76th pct)2024-04-25
Critical vulnerability · 2023-08-07
CVE-2023-38929
Public exploit
Critical · CVSS 9.8
EPSS 0.7% (49th pct)2023-08-07
Critical vulnerability · 2023-07-14
CVE-2023-37723
Public exploit
Critical · CVSS 9.8
EPSS 0.9% (57th pct)2023-07-14
Critical vulnerability · 2023-07-14
CVE-2023-37722
Public exploit
Critical · CVSS 9.8
EPSS 0.9% (57th pct)2023-07-14
Critical vulnerability · 2023-07-14
CVE-2023-37721
Public exploit
Critical · CVSS 9.8
EPSS 0.9% (57th pct)2023-07-14
Critical vulnerability · 2023-07-14
CVE-2023-37718
Public exploit
Critical · CVSS 9.8
EPSS 0.9% (57th pct)2023-07-14

Common weakness types

The CWE weakness categories most often found in Tenda 4g300 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Tenda 4g300 firmware CVEs were published each year.

2023

5

2024

5

2026

2

Other Tenda products

Browse vulnerabilities for other products by Tenda.

ac6140 CVEs ac6 firmware135 CVEs ac18 firmware121 CVEs ac18120 CVEs ac9109 CVEs ac9 firmware109 CVEs ac15107 CVEs ac15 firmware105 CVEs

All Tenda vulnerabilities

Frequently asked questions

Common questions about Tenda 4g300 firmware vulnerabilities.

How many CVEs does Tenda 4g300 firmware have?: Tenda 4g300 firmware has 12 published CVE records since 2023.
How many Tenda 4g300 firmware CVEs are in CISA KEV?: None of Tenda 4g300 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tenda 4g300 firmware vulnerabilities?: Yes — 12 of Tenda 4g300 firmware's CVEs have a known public exploit.
Which versions of Tenda 4g300 firmware are affected?: 2 distinct Tenda 4g300 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tenda 4g300 firmware CVEs?: Tenda 4g300 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
How many critical Tenda 4g300 firmware vulnerabilities are there?: Tenda 4g300 firmware has 5 critical and 6 high-severity CVEs.
What is the average severity of Tenda 4g300 firmware CVEs?: The average CVSS base score across Tenda 4g300 firmware's scored CVEs is 8.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tenda 4g300 firmware vulnerabilities

Monitor new Tenda 4g300 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing