Vulnerabilities

TI-2026-02523 CVE-2026-2930 · GHSA-c5fm-9xmx-m8v3

Tenda A18 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow

LOW 24

A vulnerability was identified in Tenda A18 15.13.07.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0035 Published 2026-02-22 No fix listed CWE-119

TI-2026-02471 CVE-2026-2877 · GHSA-69vg-2v33-6p2v

Tenda A18 Httpd Service WifiExtraSet strcpy stack-based overflow

HIGH 73

A vulnerability has been found in Tenda A18 15.13.07.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0057 Published 2026-02-21 No fix listed CWE-119

TI-2026-02470 CVE-2026-2876 · GHSA-pg46-g938-p94j

Tenda A18 setBlackRule parse_macfilter_rule stack-based overflow

HIGH 73

A vulnerability was determined in Tenda A18 15.13.07.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00602 Published 2026-02-21 No fix listed CWE-119

TI-2025-00720 CVE-2025-0848 · GHSA-wm69-gq95-wfj3

Tenda A18 HTTP POST Request SetCmdlineRun stack-based overflow

MEDIUM 64

A vulnerability was found in Tenda A18 up to 15.13.07.09.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01219 Published 2025-01-30 No fix listed CWE-119

TI-2024-21263 CVE-2024-32305 · GHSA-g7pg-ghhx-ph55

Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW…

HIGH 73

Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00607 Published 2024-04-17 No fix listed CWE-121

TI-2023-27630 CVE-2023-50585 · GHSA-frgj-vg7w-2jv6

Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName…

HIGH 82

Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2024-01-09 No fix listed CWE-787

TI-2023-20795 CVE-2023-39829 · GHSA-h95j-83q7-272j

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the…

HIGH 72

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-14 No fix listed CWE-787

TI-2023-20794 CVE-2023-39828 · GHSA-vvv9-8h6r-hqf7

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security…

HIGH 72

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-14 No fix listed CWE-787

TI-2023-20793 CVE-2023-39827 · GHSA-22x3-74c8-hwpv

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info…

HIGH 72

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-14 No fix listed CWE-787

TI-2022-22091 CVE-2022-44932 · GHSA-8wm6-g26m-hfv9

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service.

HIGH 72

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00707 Published 2022-12-08 No fix listed CWE-284

TI-2022-22090 CVE-2022-44931 · GHSA-7m95-hrhh-xjg3

Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

HIGH 72

Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00911 Published 2022-12-08 No fix listed CWE-787

Vulnerabilities

Filters