PT-2024-22453 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue is a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function. This vulnerability can be exploited, but details about the estimated number of potentially...

CVE-2024-28535

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function...

CVE-2024-28553

The data center identifies a stack overflow in the Tenda AC18 router, specifically affecting V15.03.05.05. The vulnerability is in the AddressNat function’s entrys parameter, with root cause described as a missing bounds check on input in fromAddressNat. Reported implications include potential de...

CVE-2024-28553

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function...

CVE-2024-28535

Tenda AC18 firmware v15.03.05.05 contains a stack overflow in the mitInterface parameter of the fromAddressNat function. The issue affects the dual‑band router’s networking stack and could lead to denial of service or code execution when exploited. Public fix/version details are not provided acro...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a stack buffer overflow vulnerability, which stems from the entrys parameter of the AddressNat function not checking the buffer...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the mitInterface parameter of the fromAddressNat function not checking the...

CVE-2024-28535

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function...

CVE-2024-28553

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function...

PT-2024-22458 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue is a stack overflow vulnerability in the fromAddressNat function, specifically affecting the entrys parameter. Recommendations: For Tenda AC18 version 15.03.05.05, consider restricting...

PT-2024-2216 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A vulnerability was found in the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. This issue is related to insufficient authentication of executed requests, which can lead to...

PT-2024-2266 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical vulnerability was found in the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the arguments schedStartTime and schedEndTime leads to a stack-based buffer...

PT-2024-2262 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical vulnerability is associated with the function formSetQosBand of the file /goform/SetNetControlList in the Tenda AC18 router's firmware. The issue arises from a stack-based buffer overflow...

PT-2024-2264 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue was found in the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed dir leads to a stack-based buffer overflow. This issue can be...

CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd...

CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd...

PT-2023-26612 · Tenda · Tenda Ac6 +3

Name of the Vulnerable Software and Affected Versions: Tenda AC19 version 1.0 Tenda AC18 affected versions not specified Tenda AC9 version 1.0 Tenda AC6 versions 1.0 through 2.0 Description: A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the formSetCfm function in...

CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd...

The vulnerability of the setUsbUnload function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure.

The vulnerability of the setUsbUnload function in the microprogramming software for Tenda AC18 routers is related to insufficient cleaning of input data during the processing of the deviceName parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Tenda AC18 setUsbUnload Function Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from the existence of a command injection vulnerability via the deviceName...