Tenda AC18 Stack Overflow Vulnerability

Tenda AC18 is a wireless router manufactured by Tenda. A stack overflow vulnerability exists in the formSetSafeWanWebMan function in Tenda AC18 version V15.03.05.05, which stems from improper handling of the remoteIp parameter. An attacker can exploit this vulnerability to remotely execute...

CVE-2024-34974

Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...

The vulnerability of the form_fast_setting_wifi_set function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to buffer overflow during the processing of the ssid parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

The vulnerability of the formSetSpeedWant function in the microprogramming software for Tenda AC18 allows a hacker to cause a service failure.

The vulnerability of the formSetSpeedWan function in the Tenda AC18 router’s microprogramming software is related to buffer overflow during the processing of the speeddir parameter. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the formSetSambaConf function in the Tenda AC18 router microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the formSetSambaConf function in the Tenda AC18 router microprogramming system exists due to the lack of measures taken to neutralize special elements during the processing of the usbName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the formSetFirewallCfg function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure.

The vulnerability of the formSetFirewallCfg function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the formSetClientState function in the Tenda AC18 router software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSetClientState function in the Tenda AC18 router software is related to buffer overflows in the stack when processing the limitSpeedUp parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially...

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the startIP parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of th...

CVE-2025-0528

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulation leads to command injection. The attack may be launched...

CVE-2024-2489

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2024-2490

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-2485

A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...

Tenda AC18 Command Injection Vulnerability (CNVD-2025-02899)

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 version 15.03.05.19 suffers from a command injection vulnerability that stems from the usbName parameter of the formSetSambaConf function failing to correctly filter the constructor command special characters, commands, etc. Th...

Tenda AC18 formSetDeviceName function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the devName parameter of the formSetDeviceName function failing to properly validate the length of the input data, which can be exploited by an attacker to...

Tenda AC18 formSetFirewallCfg Function Buffer Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the firewallEn parameter of the formSetFirewallCfg function failing to correctly validate the length and size of the input data, which can be exploited by an...

Tenda AC18 formSetClientState function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the limitSpeedUp parameter of the formSetClientState function failing to properly validate the length of the input data, which can be exploited by an attacke...

Tenda AC18 formSetPPTPServer function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the startIP parameter of the formSetPPTPServer function failing to properly validate the length of the input data, which can be exploited by an attacker to...

Tenda AC18 form_fast_setting_wifi_set function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the ssid parameter of the formfastsettingwifiset function failing to properly validate the length of the input data, which can be exploited by an attacker to...

Tenda AC18 formSetSpeedWan function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the speeddir parameter of the formSetSpeedWan function failing to properly validate the length and size of the input data, which can be exploited by an...

Tenda AC18 formSetCfm Function Buffer Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version 15.03.05.19, which is caused by the funcpara1 parameter of the formSetCfm function failing to correctly validate the length of the input data, and can be exploited by an attacke...