Tenda Ac18 vulnerabilities, page 5
105 vulnerabilities
Known vulnerabilities in Tenda Ac18, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2024-57582tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function.EPSS0.75%CriticalCVE-2024-57581tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.EPSS0.75%HighCVE-2024-10280tenda · ac10_firmware +9 moreTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereferenceA vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.80%HighCVE-2024-28551tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of form_fast_setting_wifi_set function.EPSS0.84%CriticalCVE-2024-28537tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function.EPSS0.78%CriticalCVE-2024-28553tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function.EPSS0.78%MediumCVE-2024-28547tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function.EPSS0.50%CriticalCVE-2024-28535tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function.EPSS0.75%CriticalCVE-2024-28545tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.EPSS2.30%MediumCVE-2024-28550tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function.EPSS0.39%HighCVE-2024-30891tenda · ac18_firmwaretenda ac18_firmwareA command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.EPSS1.90%HighCVE-2024-34974tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter.EPSS0.72%HighCVE-2024-33181tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.EPSS0.61%CriticalCVE-2024-33835tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function.EPSS0.82%CriticalCVE-2026-11528tenda · ac18_firmwareTenda AC18 Web Management getRebootStatus sub_45304 stack-based overflowA vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.EPSS0.47%CriticalCVE-2026-31255tenda · ac18_firmwaretenda ac18_firmwareA command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is located in the /goform/SetSambaCfg interface, where improper handling of the guestuser parameter allows attackers to execute arbitrary system commands.EPSS1.49%CriticalCVE-2026-82695tenda · ac18_firmwareTenda AC18 Telnet telnet missing authenticationA security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.EPSS1.41%CriticalCVE-2023-38823tenda · ac18_firmware +3 moretenda ac18_firmwareBuffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.EPSS1.20%CriticalCVE-2023-24167tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.EPSS1.00%CriticalCVE-2023-24164tenda · ac18_firmwaretenda ac18_firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.EPSS1.00%