Tendacn vulnerabilities

TI-2024-21960 CVE-2024-33180 · GHSA-rm36-22xp-2grj

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow…

HIGH 82

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2024-07-16 No fix listed CWE-120

TI-2022-19452 CVE-2022-40869 · GHSA-669q-4gjm-8895

Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the…

HIGH 82

Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01469 Published 2022-09-23 No fix listed CWE-787

TI-2022-19448 CVE-2022-40865 · GHSA-hf58-wxpq-9pg5

Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the…

HIGH 82

Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01469 Published 2022-09-23 No fix listed CWE-787

TI-2022-19447 CVE-2022-40864 · GHSA-5fp5-vv6c-j2hj

Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the…

HIGH 82

Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0162 Published 2022-09-23 No fix listed CWE-787

TI-2022-19446 CVE-2022-40862 · GHSA-5xm4-48v6-7p2f

Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the…

HIGH 82

Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01469 Published 2022-09-23 No fix listed CWE-787

TI-2024-21962 CVE-2024-33182 · GHSA-8hrw-qmjc-qr28

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow…

HIGH 76

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00611 Published 2024-07-16 No fix listed CWE-121

TI-2022-13378 CVE-2022-31446 · GHSA-8hqv-xv5w-4q8r

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code…

HIGH 68

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34842 Published 2022-06-14 No fix listed CWE-78

TI-2020-15267 CVE-2020-24987 · GHSA-q9jc-x24x-r9x9

Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could…

MEDIUM 48

Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_aut…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03104 Published 2020-09-04 No fix listed CWE-287

TI-2020-10504 CVE-2020-13393 · GHSA-7q2h-j6h8-gpm7