Priority HIGH 82
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00774 · Published 2025-01-16 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00774 · Published 2025-01-16 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00791 · Published 2025-01-16 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00699 · Published 2025-01-16 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00814 · Published 2025-01-16 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00817 · Published 2024-05-01 · No fix listed CWE-121
Priority HIGH 82
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00775 · Published 2024-03-12 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02302 · Published 2024-03-26 · No fix listed CWE-77
Priority HIGH 82
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01203 · Published 2023-11-20 · No fix listed CWE-120
Priority HIGH 82
Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01019 · Published 2022-10-18 · No fix listed CWE-787
Priority HIGH 82
Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01174 · Published 2022-09-23 · No fix listed CWE-787
Priority HIGH 76
Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00754 · Published 2024-03-12 · No fix listed CWE-121
Priority HIGH 75
A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01121 · Published 2026-04-27 · No fix listed CWE-77
Priority HIGH 75
A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03897 · Published 2024-03-24 · No fix listed CWE-78
Priority HIGH 73
A vulnerability was detected in Tenda AC18 15.03.05.05.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0074 · Published 2025-12-21 · No fix listed CWE-119
Priority HIGH 73
A security vulnerability has been detected in Tenda AC18 15.03.05.05.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0074 · Published 2025-12-21 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was detected in Tenda AC18 15.03.05.19(6318).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01097 · Published 2025-10-06 · No fix listed CWE-119
Priority HIGH 73
A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01273 · Published 2025-10-06 · No fix listed CWE-119
Priority HIGH 73
A weakness has been identified in Tenda AC18 15.03.05.19(6318).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01273 · Published 2025-10-06 · No fix listed CWE-119
Priority HIGH 73
A security flaw has been discovered in Tenda AC18 15.03.05.19(6318).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00817 · Published 2025-10-06 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was identified in Tenda AC18 15.03.05.19(6318).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00846 · Published 2025-10-06 · No fix listed CWE-119
Priority HIGH 73
A weakness has been identified in Tenda AC8 16.03.34.06.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.04049 · Published 2025-09-28 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00942 · Published 2025-08-15 · No fix listed CWE-119
Priority HIGH 73
Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00613 · Published 2024-07-16 · No fix listed CWE-121
Priority HIGH 73
A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01896 · Published 2024-04-05 · No fix listed CWE-77
Load more
THREATIST.IORead the docs