CVE-2018-18706

CVE-2018-18706 affects Tenda AC7/AC9/AC10/AC15/AC18 routers. The vulnerability exists in the router’s web server (httpd) where, on processing the page parameter of the function fromDhcpListClient , the value is directly used in a sprintf into a stack-based local variable, overriding the function’...

CVE-2018-18709: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post request, the...

CVE-2018-18707: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value...

PT-2018-14586

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

PT-2018-14584

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

PT-2018-14587

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-18706: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

PT-2018-14585

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-18708: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

Tenda AC9 and AC10 Operating System Command Injection Vulnerability

Tenda AC9 is a wireless router product from Tenda, a Chinese company. An operating system command injection vulnerability exists in Tenda AC9 version 15.03.05.196318CN and AC10 version 15.03.06.23CN and earlier versions, which originates from the 'mcc' parameter in a POST request being used...

CVE-2018-16334

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

Command injection

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

CVE-2018-16334

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

CVE-2018-16334: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...

PT-2018-13497

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Description An issue was discovered where the mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection. Recommendations For Tend...

PT-2018-13496

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-16333: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is...

CVE-2018-14492

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

Stack overflow

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

CVE-2018-14492

The CVE-2018-14492 entry affects Tenda router models AC7 (firmware up to 15.03.06.44_CN), AC9 (up to 15.03.05.19(6318)_CN), and AC10 (up to 15.03.06.23_CN). A stack-based buffer overflow is triggered by a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI. No explicit patch/v...