CVE-2018-18708

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

CVE-2018-18708

The CVE-2018-18708 vulnerability affects Tenda routers (AC7, AC9, AC10, AC15, AC18 with CN firmware). It is a buffer overflow in the httpd web server triggered by the page parameter in fromAddressNat during a POST request, where the value is passed to sprintf into a stack local variable, potentia...