CveMateVulnerability intelligence

Tenda Ac18 vulnerabilities, page 3

105 vulnerabilities

Known vulnerabilities in Tenda Ac18, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2022-38309tendaac18_firmware4y ago07-09-2022 18:41

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.CVE-2022-38314tendaac18_firmware4y ago07-09-2022 18:40

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.CVE-2022-38312tendaac18_firmware4y ago07-09-2022 18:41

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.CVE-2022-44178tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.CVE-2022-44176tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.CVE-2022-44174tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.CVE-2022-44180tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.CVE-2022-44183tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.CVE-2022-44177tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.CVE-2022-44172tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.CVE-2022-44171tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.CVE-2022-44175tendaac18_firmware3y ago21-11-2022 00:00

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.CVE-2022-30475tendaac18_firmware4y ago26-05-2022 15:24

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.CVE-2022-30477tendaac18_firmware4y ago26-05-2022 15:26

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.CVE-2022-30476tendaac18_firmware4y ago26-05-2022 15:25

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.CVE-2022-30474tendaac18_firmware4y ago26-05-2022 15:23

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.CVE-2022-30473tendaac18_firmware4y ago26-05-2022 15:19

Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set CVE-2022-30472tendaac18_firmware4y ago26-05-2022 15:21

Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat CVE-2022-35201tendaac18_firmware4y ago19-08-2022 14:25

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.CVE-2017-16923tendaac15_firmware+28y ago21-11-2017 14:00

Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to execute arbitrary OS commands via a crafted cgi-bin/luci/usbeject?dev_name= GET request from the LAN. This occurs because the "sub_A6E8 usbeject_process_entry" function executes a system function with untrusted input.