CVE-2025-5607

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2025-5609 Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2025-5609

CVE-2025-5609 affects Tenda AC18 (firmware 15.03.05.05): the fromadvsetlanip function in /goform/AdvSetLanip processes lanMask and causes a buffer overflow; this can be exploited remotely and has public disclosure. Affected component is the fromadvsetlanip handler; root cause is improper handling...

CVE-2025-5609 Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2025-5608 Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2025-5608 Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2025-5608

CVE-2025-5608 affects Tenda AC18 (firmware 15.03.05.05). The vulnerability is in the formsetreboottimer function of /goform/SetSysAutoRebbotCfg, where manipulating the rebootTime argument causes a buffer overflow. It is remotely exploitable and publicly disclosed. Connected documents corroborate ...

CVE-2025-5607

CVE-2025-5607 affects Tenda AC18 15.03.05.05. A buffer overflow exists in the formSetPPTPUserList function of /goform/setPptpUserList, due to improper handling of the list argument. This can potentially be exploited remotely to execute arbitrary commands. Multiple connected sources confirm the is...

CVE-2025-5607 Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2025-5607 Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2025-5606

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5606

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5606 Tenda AC18 SetIPTVCfg formSetIptv command injection

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5606 Tenda AC18 SetIPTVCfg formSetIptv command injection

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-5606

The CVE-2025-5606 entry affects Tenda AC18, version 15.03.05.05, with a vulnerability in the formSetIptv function of /goform/SetIPTVCfg. The manipulation of the list/argument list enables command injection and can be exploited remotely. Several connected sources confirm a remote, network-exposed ...

PT-2025-23842 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formSetIptv function of the file /goform/SetIPTVCfg. The manipulation of the list argument leads to command injection. This issue can be exploited remotely...

PT-2025-23858 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical vulnerability has been found in the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to a buffer overflow. It is...

Tenda AC18 安全漏洞

The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC18 /goform/AdvSetLanip handling lanMask parameter, which can be exploited by a remote attacker to submit a special request that can be used to execute arbitrary code in the application...

Tenda AC18 安全漏洞

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from a misuse of the parameter rebootTime in the file /goform/SetSysAutoRebbotCfg, which can be exploited by an attacker to submit a special request and execute...

Tenda AC18 安全漏洞

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from a misuse of the parameter list in the file /goform/setPptpUserList, which can be exploited by an attacker to submit a special request and execute arbitrary...