PT-2018-14586

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-18709: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post request, the...

CVE-2018-18707: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value...

PT-2018-14584

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

PT-2018-14587

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-18706: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

PT-2018-14585

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-18708: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

PT-2018-13496

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-16333: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is...

The vulnerability of the Tenda AC15 router’s microprogramming software allows a hacker to gain access to the device with root privileges.

The vulnerability of the Tenda AC15 router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device with root privileges by running the telnetd daemon using a special...

Router vulnerability analysis the fifth bomb: CVE-2018-5767 router remote code execution-vulnerability warning-the black bar safety net

Vulnerability overview CVE-2018-5767 TENDA AC15 router right remote code execution Reference information: https://www.fidusinfosec.com/remote-code-execution-cve-2018-5767/ Vulnerability firmware version: Tenda cn Ac15firmware:15.03.1.16 2. The vulnerability analysis. Vulnerabilities file is...

Tenda AC15 Router Remote Code Execution Vulnerability

Tenda AC15 is a wireless router product from Tenda, a Chinese company. A remote code execution vulnerability exists on the Tenda AC15 V15.03.1.16multi device, which can be exploited by an unauthenticated, remote attacker to perform remote code execution on the device using the COOKIE password...

Tenda AC15 Router Code Execution Vulnerability

Tenda AC15 router is a wireless router product from Tenda, China. A security vulnerability exists in the Tenda AC15 router. The vulnerability can be exploited by a remote attacker to execute code with the help of a specially crafted 'COOKIE' parameter...

Tenda AC15 Authentication Vulnerability

Tenda AC15 is a wireless router product from Tenda, a Chinese company. A security vulnerability exists in the Tenda AC15, which originates from some default accounts on the device having root privileges. The vulnerability can be exploited by a remote attacker to create a telnetd service by sendin...

Remote code execution

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header...

CVE-2018-5768

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header...

CVE-2018-5768

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header...

CVE-2018-5768

CVE-2018-5768 affects the Tenda AC15 router. The vulnerability allows remote, unauthenticated code execution via a specially crafted COOKIE header/password parameter, enabling an attacker to run arbitrary code on the device. Connected sources also indicate related exploit paths such as starting a...

Design/Logic Flaw

An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet, creating a telnetd service on the device. This service is password protected; however, several default accounts exist on the device that are root accounts, which can be used to...