Tenda A18 vulnerabilities
11 vulnerabilities
Known vulnerabilities in Tenda A18, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-0848tendaa18_firmware
EPSS score1.16%
A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function SetCmdlineRun of the file /goform/SetCmdlineRun of the component HTTP POST Request Handler. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2022-44932tendaa18_firmwareEPSS score0.71%
An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service.CVE-2022-44931tendaa18_firmwareEPSS score0.91%
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.CVE-2024-32305tendaa18_firmwareEPSS score0.61%
Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.CVE-2026-2876tendaa18_firmwareEPSS score1.08%
A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.CVE-2026-2877tendaa18_firmwareEPSS score1.08%
A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2026-2930tendaa18_firmwareEPSS score0.66%
A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.CVE-2023-39828tendaa18_firmwareEPSS score0.81%
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.CVE-2023-39827tendaa18_firmwareEPSS score0.81%
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function.CVE-2023-39829tendaa18_firmwareEPSS score0.81%
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function.CVE-2023-50585tendaa18_firmwareEPSS score0.70%
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.