Ac18 Firmware

CVEs (121)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-24166	Tenda AC18	Cri	0.64	9.8	0.01	Jan 26, 2023	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.
CVE-2023-24165	Tenda AC18	Cri	0.64	9.8	0.01	Jan 26, 2023	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.
CVE-2023-24164	Tenda AC18	Cri	0.64	9.8	0.01	Jan 26, 2023	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.
CVE-2022-44183	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.
CVE-2022-44180	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.
CVE-2022-44178	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.
CVE-2022-44177	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.
CVE-2022-44176	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.
CVE-2022-44175	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44174	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.
CVE-2022-44172	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVE-2022-44171	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVE-2022-43260	Tenda AC18	Cri	0.64	9.8	0.01	Oct 18, 2022	Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVE-2022-40854	Tenda AC18	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40869	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").
CVE-2022-40865	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/
CVE-2022-40864	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet
CVE-2022-40862	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting
CVE-2022-38326	Tenda AC15	Cri	0.64	9.8	0.01	Sep 15, 2022	Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-38325	Tenda AC15	Cri	0.64	9.8	0.01	Sep 15, 2022	Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.

CVE-2023-24166CriJan 26, 2023
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.
CVE-2023-24165CriJan 26, 2023
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.
CVE-2023-24164CriJan 26, 2023
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.
CVE-2022-44183CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.
CVE-2022-44180CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.
CVE-2022-44178CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.
CVE-2022-44177CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.
CVE-2022-44176CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.
CVE-2022-44175CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44174CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.
CVE-2022-44172CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVE-2022-44171CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVE-2022-43260CriOct 18, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVE-2022-40854CriSep 23, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40869CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").
CVE-2022-40865CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/
CVE-2022-40864CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet
CVE-2022-40862CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting
CVE-2022-38326CriSep 15, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-38325CriSep 15, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.

Page 2 of 7