CVE-2024-28551

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of formfastsettingwifiset function...

CVE-2024-28551

CVE-2024-28551 affects the Tenda AC18 router (V15.03.05.05). The vulnerability is a stack/buffer overflow in the ssid parameter of the form_fast_setting_wifi_set function. According to CVSS details, it carries a high impact on availability (I/N/A: Availability Impact = High; Confidentiality/Integ...

CVE-2024-28551

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of formfastsettingwifiset function...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability, which originates from a buffer overflow vulnerability in the ssid parameter of the...

CVE-2024-28545

CVE-2024-28545 describes a command injection vulnerability in the Tenda AC18 router (v15.03.05.05) where the flaw resides in the deviceName parameter of the formsetUsbUnload function. Connected sources consistently identify this issue for the affected device/model and root cause as a command inje...

PT-2024-22454 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue concerns a command injection vulnerability. It is located in the deviceName parameter of the formsetUsbUnload function. Recommendations: For Tenda AC18 version 15.03.05.05, consider...

CVE-2024-28545

Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function...

CVE-2024-2854

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-2854

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-2854 Tenda AC18 setsambacfg formSetSambaConf os command injection

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-2854

CVE-2024-2854 affects Tenda AC18 (firmware 15.03.05.05). The vulnerability is in the function formSetSambaConf of the page /goform/setsambacfg where manipulating the argument usbName leads to an OS command injection. The issue can be exploited remotely, and the exploit has been disclosed publicly...

CVE-2024-2854 Tenda AC18 setsambacfg formSetSambaConf os command injection

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

Tenda AC18 操作系统命令注入漏洞

Tenda AC18 is a router from Tenda, China. An OS command injection vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from an OS command injection in the usbName parameter of the formSetSambaConf method on the /goform/setsambacfg page...

The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...

The vulnerability of the formSetSpeedWan() function (/goform/SetSpeedWan) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetSpeedWan function /goform/SetSpeedWan of the Tenda AC18 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the speeddir parameter. Exploiting this vulnerability can allow an attacker to compromise th...

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC18 router’s software lies in the fact that the operation may escape out of the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the setSchedWifi()/goform.openSchedWifi function in the Tenda AC18 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setSchedWifi/goform.openSchedWifi function in the Tenda AC18 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the schedEndTime parameter. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the formSetQosBand() function (/goform/SetNetControlList) in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetQosBand function /goform/SetNetControlList of the Tenda AC18 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the fromSysToolRestoreSet() function (/goform/SysToolRestoreSet) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolRestoreSet function /goform/SysToolRestoreSet in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF atta...

The vulnerability of the fromSysToolReboot() function (/goform/SysToolReboot) in the Tenda AC18 router’s microprogramming software allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC18 router’s microprogramming software is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability could allow a remote attacker to perform a CSRF attack...