CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-30474
https://notcve.org/view.php?id=CVE-2022-30474
26 May 2022 — Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request. Se ha detectado que el router Tenda AC Series AC18 versión V15.03.05.19(6318), contenía un desbordamiento de la pila en el módulo httpd cuando manejaba una petición /goform/saveParentControlInfo • https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/5 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-30472
https://notcve.org/view.php?id=CVE-2022-30472
26 May 2022 — Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat El router de la serie AC de Tenda AC18 versión V15.03.05.19(6318), presenta una vulnerabilidad de desbordamiento del búfer en la región stack de la memoria en la función fromAddressNat • https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/1 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2022-30473
https://notcve.org/view.php?id=CVE-2022-30473
26 May 2022 — Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set El router Tenda AC Series AC18 versión V15.03.05.19(6318), presenta una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en la función form_fast_setting_wifi_set • https://github.com/lcyfrank/VulnRepo/tree/master/IoT/Tenda/2 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 2%CPEs: 4EXPL: 0CVE-2020-24987
https://notcve.org/view.php?id=CVE-2020-24987
04 Sep 2020 — Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to "radius". El enrutador Tenda AC18 versiones hasta V15.03.05.05_EN y versiones hasta V15.03.05.19(6318), los dispositivos CN podrían causar una ejecución remota de código debido a un manejo de autenticación incorrecto de la... • https://cwe.mitre.org/data/definitions/287.html • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 1CVE-2018-18727
https://notcve.org/view.php?id=CVE-2018-18727
28 Oct 2018 — An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function. Se ha descubierto un problema en dispositivos Tenda AC7 V15.03.06.44_CN, ... • https://github.com/ZIllR0/Routers/blob/master/Tenda/stack1.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 3%CPEs: 6EXPL: 1CVE-2018-18728
https://notcve.org/view.php?id=CVE-2018-18728
28 Oct 2018 — An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request. Se ha descubierto un problema en dispositivos Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN y AC18 V15.03.05.19(6318)_CN. Permiten la ejecución remota de código mediante metacaracteres shell en el campo usbName en la función __fastcall con una petición PO... • https://github.com/ZIllR0/Routers/blob/master/Tenda/rce1.md • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 0%CPEs: 10EXPL: 1CVE-2018-18729
https://notcve.org/view.php?id=CVE-2018-18729
28 Oct 2018 — An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a post request, the value is directly used in a strcpy to a variable placed on the heap, which can leak sensitive information or even hijack program control flow. Se ha descubierto un problema en dispositivos Tenda AC... • https://github.com/ZIllR0/Routers/blob/master/Tenda/heapoverflow1.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 1CVE-2018-18730
https://notcve.org/view.php?id=CVE-2018-18730
28 Oct 2018 — An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters for a post request, each value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function. Se ha descubierto un problema en dispositivos Tenda AC7 V15.0... • https://github.com/ZIllR0/Routers/blob/master/Tenda/stack3.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 1CVE-2018-18731
https://notcve.org/view.php?id=CVE-2018-18731
28 Oct 2018 — An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceMac' parameter for a post request, the value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function. Se ha descubierto un problema en dispositivos Tenda AC7 V15.03.06.44_CN, ... • https://github.com/ZIllR0/Routers/blob/master/Tenda/stack4.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 1CVE-2018-18732
https://notcve.org/view.php?id=CVE-2018-18732
28 Oct 2018 — An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'ntpServer' parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function. Se ha descubierto un problema en dispositivos Tenda AC7 V15.03.06.44_CN, A... • https://github.com/ZIllR0/Routers/blob/master/Tenda/stack2.md • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •