Filtered by vendor Tenda Subscriptions
Filtered by product Ac18 Firmware Subscriptions
Total 49 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-44180 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.
CVE-2022-44177 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.
CVE-2022-44172 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVE-2022-43260 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVE-2022-40854 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40861 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 7.2 High
Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/
CVE-2022-38313 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
CVE-2022-38309 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2022-38311 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
CVE-2022-38312 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-38310 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2022-38314 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.
CVE-2022-35201 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVE-2022-30476 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.
CVE-2022-30472 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat
CVE-2022-30477 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.
CVE-2022-30473 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 7.5 High
Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
CVE-2022-30474 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 9.8 Critical
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.
CVE-2022-30475 1 Tenda 2 Ac18, Ac18 Firmware 2024-08-03 7.5 High
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.
CVE-2024-2485 1 Tenda 1 Ac18 Firmware 2024-08-02 8.8 High
A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256892. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.