Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Ac18_firmware
(Tenda)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 79 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2024-03-15 | CVE-2024-2490 | A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256897 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but... | Ac18_firmware | 8.8 | ||
2022-05-26 | CVE-2022-30472 | Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat | Ac18_firmware | 9.8 | ||
2022-05-26 | CVE-2022-30473 | Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set | Ac18_firmware | 7.5 | ||
2022-05-26 | CVE-2022-30474 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request. | Ac18_firmware | 9.8 | ||
2022-05-26 | CVE-2022-30475 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request. | Ac18_firmware | 7.5 | ||
2022-05-26 | CVE-2022-30476 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request. | Ac18_firmware | 9.8 | ||
2022-05-26 | CVE-2022-30477 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request. | Ac18_firmware | 9.8 | ||
2022-08-19 | CVE-2022-35201 | Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. | Ac18_firmware | 9.8 | ||
2022-09-07 | CVE-2022-38309 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. | Ac18_firmware | 9.8 | ||
2022-09-07 | CVE-2022-38310 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg. | Ac18_firmware | 9.8 |