Ac18 Firmware vulnerabilities

9 known vulnerabilities in Ac18 Firmware from Tendacn. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ac18_firmware: Stack-based Buffer Overflow

  CVE-2024-33181Jul 16, 2024Tendacn

  Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.

• 9.8 Critical severity

  ac18_firmware: Out-of-bounds Write

  CVE-2024-33182Jul 16, 2024Tendacn

  Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.

• 9.8 Critical severity

  ac18: Out-of-bounds Write

  CVE-2024-33180Jul 16, 2024Tenda

  Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.

• 9.8 Critical severity

  Ac15 Firmware: Out-of-bounds Write

  CVE-2022-40869Sep 23, 2022TendacnEPSS 1.47%

  Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").

• 9.8 Critical severity

  Ac15 Firmware: Out-of-bounds Write

  CVE-2022-40864Sep 23, 2022TendacnEPSS 1.62%

  Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet

• 9.8 Critical severity

  Ac15 Firmware: Out-of-bounds Write

  CVE-2022-40862Sep 23, 2022TendacnEPSS 1.47%

  Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting

• 9.8 Critical severity

  Ac15 Firmware: Buffer Copy without Checking Size of Input

  CVE-2022-38326Sep 15, 2022TendacnEPSS 1.15%

  Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.

• 9.8 Critical severity

  Ac15 Firmware: Buffer Copy without Checking Size of Input

  CVE-2022-38325Sep 15, 2022TendacnEPSS 1.15%

  Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.

• 9.8 Critical severity

  Ac18 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-31446Jun 14, 2022TendacnEPSS 34.8%

  Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.