Tenda Ac18 Firmware vulnerabilities

CVE-2024-30891 [HIGH] CWE-77 CVE-2024-30891: A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which all A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.

CVE-2024-2854 [CRITICAL] CWE-78 CVE-2024-2854: A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the fun A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257778 is th

CVE-2025-5606 [CRITICAL] CWE-74 CVE-2025-5606: A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerab A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-11326 [HIGH] CWE-119 CVE-2025-11326: A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

CVE-2025-11121 [HIGH] CWE-74 CVE-2025-11121: A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unk A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

CVE-2024-2485 [HIGH] CWE-121 CVE-2024-2485: A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this iss A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The ide

CVE-2024-2488 [HIGH] CWE-121 CVE-2024-2488: A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affec A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIP leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The

CVE-2024-2558 [HIGH] CWE-121 CVE-2024-2558: A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affec A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identif

CVE-2025-11327 [HIGH] CWE-119 CVE-2025-11327: A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affec A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-11328 [HIGH] CWE-119 CVE-2025-11328: A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown proces A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVE-2025-11324 [HIGH] CWE-119 CVE-2025-11324: A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.

CVE-2025-11122 [HIGH] CWE-119 CVE-2025-11122: A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

CVE-2025-14993 [HIGH] CWE-119 CVE-2025-14993: A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the fil A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVE-2025-14992 [HIGH] CWE-119 CVE-2025-14992: A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the fu A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentControlInfo of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed public

CVE-2024-2489 [HIGH] CWE-121 CVE-2024-2489: A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the fun A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identif

CVE-2024-2490 [HIGH] CWE-121 CVE-2024-2490: A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnera A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and

CVE-2024-2487 [HIGH] CWE-121 CVE-2024-2487: A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerab A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and ma

CVE-2024-2486 [HIGH] CWE-121 CVE-2024-2486: A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affect A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used

CVE-2024-2547 [HIGH] CWE-121 CVE-2024-2547: A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this iss A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabili

CVE-2023-30135 [CRITICAL] CWE-77 CVE-2023-30135: Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via th Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function.