AC18

CVEs (108)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-44172	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVE-2022-44171	Tenda AC18	Cri	0.64	9.8	0.01	Nov 21, 2022	Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVE-2022-43260	Tenda AC18	Cri	0.64	9.8	0.01	Oct 18, 2022	Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVE-2022-40854	Tenda AC18	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40869	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").
CVE-2022-40865	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/
CVE-2022-40864	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet
CVE-2022-40862	Tenda AC15	Cri	0.64	9.8	0.01	Sep 23, 2022	Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting
CVE-2022-38326	Tenda AC15	Cri	0.64	9.8	0.01	Sep 15, 2022	Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-38325	Tenda AC15	Cri	0.64	9.8	0.01	Sep 15, 2022	Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.
CVE-2022-38314	Tenda AC18	Cri	0.64	9.8	0.01	Sep 7, 2022	Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.
CVE-2022-38313	Tenda AC18	Cri	0.64	9.8	0.01	Sep 7, 2022	Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
CVE-2022-38312	Tenda AC18	Cri	0.64	9.8	0.01	Sep 7, 2022	Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-38311	Tenda AC18	Cri	0.64	9.8	0.01	Sep 7, 2022	Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
CVE-2022-38310	Tenda AC18	Cri	0.64	9.8	0.01	Sep 7, 2022	Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2022-38309	Tenda AC18	Cri	0.64	9.8	0.01	Sep 7, 2022	Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2022-35201	Tenda AC18	Cri	0.64	9.8	0.02	Aug 19, 2022	Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVE-2022-30477	Tenda AC18	Cri	0.64	9.8	0.01	May 26, 2022	Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.
CVE-2022-30476	Tenda AC18	Cri	0.64	9.8	0.01	May 26, 2022	Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.
CVE-2022-30474	Tenda AC18	Cri	0.64	9.8	0.01	May 26, 2022	Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.

CVE-2022-44172CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVE-2022-44171CriNov 21, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVE-2022-43260CriOct 18, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
CVE-2022-40854CriSep 23, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40869CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").
CVE-2022-40865CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/
CVE-2022-40864CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet
CVE-2022-40862CriSep 23, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting
CVE-2022-38326CriSep 15, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-38325CriSep 15, 2022
Tenda
AC15
risk 0.64cvss 9.8epss 0.01
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile.
CVE-2022-38314CriSep 7, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo.
CVE-2022-38313CriSep 7, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
CVE-2022-38312CriSep 7, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-38311CriSep 7, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
CVE-2022-38310CriSep 7, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2022-38309CriSep 7, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2022-35201CriAug 19, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.02
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVE-2022-30477CriMay 26, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.
CVE-2022-30476CriMay 26, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.
CVE-2022-30474CriMay 26, 2022
Tenda
AC18
risk 0.64cvss 9.8epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.

Page 2 of 6