Ac18 Firmware Security Vulnerabilities and Issues — Ac18 Firmware CVE List

cve

CVE-2017-16923

Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.0...

8.8CVSS

9.1AI Score

0.002EPSS

2017-11-21 02:29 PM

32

cve

CVE-2017-16936

Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15...

6.5CVSS

6.5AI Score

0.002EPSS

2017-11-24 07:29 AM

30

cve

CVE-2018-18706

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromD...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

28

cve

CVE-2018-18707

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, th...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

26

cve

CVE-2018-18708

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromA...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

21

2

cve

CVE-2018-18709

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "firewallEn" parameter for a post reque...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

30

cve

CVE-2018-18727

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post r...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

26

cve

CVE-2018-18728

An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request.

9.8CVSS

9.6AI Score

0.014EPSS

2018-10-29 12:29 PM

41

cve

CVE-2018-18729

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a po...

9.8CVSS

9.4AI Score

0.005EPSS

2018-10-29 12:29 PM

32

cve

CVE-2018-18730

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters fo...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

26

cve

CVE-2018-18731

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceMac' parameter for a post re...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

30

cve

CVE-2018-18732

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'ntpServer' parameter for a post re...

7.5CVSS

7.7AI Score

0.001EPSS

2018-10-29 12:29 PM

28

cve

CVE-2022-30472

Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat

9.8CVSS

9.6AI Score

0.002EPSS

2022-05-26 04:15 PM

40

5

cve

CVE-2022-30473

Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set

7.5CVSS

7.7AI Score

0.001EPSS

2022-05-26 04:15 PM

37

2

cve

CVE-2022-30474

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.

9.8CVSS

9.6AI Score

0.002EPSS

2022-05-26 04:15 PM

32

2

cve

CVE-2022-30475

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.

7.5CVSS

7.7AI Score

0.001EPSS

2022-05-26 04:15 PM

53

2

cve

CVE-2022-30476

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.

9.8CVSS

9.7AI Score

0.002EPSS

2022-05-26 04:15 PM

35

2

cve

CVE-2022-30477

Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.

9.8CVSS

9.7AI Score

0.002EPSS

2022-05-26 04:15 PM

43

3

cve

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.

9.8CVSS

9.7AI Score

0.011EPSS

2022-08-19 03:15 PM

44

9

cve

CVE-2022-38309

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.

9.8CVSS

9.6AI Score

0.002EPSS

2022-09-07 07:15 PM

29

2

cve

CVE-2022-38310

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.

9.8CVSS

9.6AI Score

0.002EPSS

2022-09-07 07:15 PM

32

2

cve

CVE-2022-38311

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.

9.8CVSS

9.6AI Score

0.002EPSS

2022-09-07 07:15 PM

35

3

cve

CVE-2022-38312

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.

9.8CVSS

9.6AI Score

0.002EPSS

2022-09-07 07:15 PM

35

3

cve

CVE-2022-38313

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.

9.8CVSS

9.6AI Score

0.002EPSS

2022-09-07 07:15 PM

32

3

cve

CVE-2022-38314

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.

9.8CVSS

9.6AI Score

0.002EPSS

2022-09-07 07:15 PM

30

3

cve

CVE-2022-40854

Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set

9.8CVSS

9.5AI Score

0.002EPSS

2022-09-23 03:15 PM

30

4

cve

CVE-2022-40861

Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/

7.2CVSS

7AI Score

0.001EPSS

2022-09-23 03:15 PM

30

2

cve

CVE-2022-43260

Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.

9.8CVSS

9.7AI Score

0.002EPSS

2022-10-18 03:15 PM

42

4

cve

CVE-2022-44171

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

35

6

cve

CVE-2022-44172

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

33

6

cve

CVE-2022-44174

Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

35

6

cve

CVE-2022-44175

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

26

8

cve

CVE-2022-44176

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

33

8

cve

CVE-2022-44177

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

27

8

cve

CVE-2022-44178

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

55

8

cve

CVE-2022-44180

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

34

6

cve

CVE-2022-44183

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.

9.8CVSS

9.4AI Score

0.003EPSS

2022-11-21 06:15 PM

58

6

cve

CVE-2023-24164

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.

9.8CVSS

9.4AI Score

0.002EPSS

2023-01-26 09:18 PM

93

cve

CVE-2023-24165

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.

9.8CVSS

9.4AI Score

0.002EPSS

2023-01-26 09:18 PM

93

cve

CVE-2023-24166

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.

9.8CVSS

9.4AI Score

0.002EPSS

2023-01-26 09:18 PM

28

cve

CVE-2023-24167

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.

9.8CVSS

9.4AI Score

0.002EPSS

2023-01-26 09:18 PM

25

cve

CVE-2023-24169

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c.

9.8CVSS

9.4AI Score

0.002EPSS

2023-01-26 09:18 PM

86

cve

CVE-2023-24170

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat.

9.8CVSS

9.4AI Score

0.002EPSS

2023-01-26 09:18 PM

94

cve

CVE-2023-30135

Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function.

9.8CVSS

9.7AI Score

0.008EPSS

2023-05-05 02:15 AM

31

cve

CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.

9.8CVSS

9.6AI Score

0.003EPSS

2023-11-20 08:15 PM

16

cve

CVE-2024-2485

A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit h...

8.8CVSS

6.8AI Score

0.0004EPSS

2024-03-15 07:15 AM

32

cve

CVE-2024-2487

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated remot...

8.8CVSS

6.9AI Score

0.0004EPSS

2024-03-15 09:15 AM

33

cve

CVE-2024-2488

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIP leads to stack-based buffer overflow. The attack may be initiated remotely. The exploi...

8.8CVSS

6.9AI Score

0.0004EPSS

2024-03-15 09:15 AM

30

cve

CVE-2024-2490

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched re...

8.8CVSS

8.8AI Score

0.0004EPSS

2024-03-15 10:15 AM

31

cve

CVE-2024-2546

A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

8.8CVSS

8.8AI Score

0.0004EPSS

2024-03-17 02:15 AM

42