GCVE - cpe:2.3:h:tendacn:ac18:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tendacn:ac18:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Tendacn (`911f347d-94dc-5fe9-b545-6a7f771d2f53`)
Product	Ac18 (`9536b15d-6f7d-555f-bf4e-b7aa995a1cc5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-33182`	not_vulnerable	2026-06-03 14:55:52.029860	Details available Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter. Published: 2024-07-16T00:00:00.000Z Updated: 2024-08-02T02:27:53.372Z Open on db.gcve.eu Reference links https://palm-vertebra-fe9.notion.site/addWifiMacFilter_1-067fa6984f0d4933b88c63efd7486479	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33180`	not_vulnerable	2026-06-03 14:55:52.027394	Details available Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo. Published: 2024-07-16T00:00:00.000Z Updated: 2024-08-02T02:27:53.477Z Open on db.gcve.eu Reference links https://palm-vertebra-fe9.notion.site/saveParentControlInfo_1-7c9695d0251945ae8006db705b9b80ac	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40869`	not_vulnerable	2026-06-03 14:48:03.657802	Details available Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list"). Published: 2022-09-23T13:32:22.000Z Updated: 2025-05-27T14:44:13.104Z Open on db.gcve.eu Reference links https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromDhcpListClient-list.md https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromDhcpListClient-list.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40865`	not_vulnerable	2026-06-03 14:48:03.656136	Details available Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/ Published: 2022-09-23T13:35:42.000Z Updated: 2025-05-27T14:43:34.801Z Open on db.gcve.eu Reference links https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSchedWifi.md https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSchedWifi.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40864`	not_vulnerable	2026-06-03 14:48:03.655639	Details available Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet Published: 2022-09-23T13:38:53.000Z Updated: 2025-05-22T20:29:21.469Z Open on db.gcve.eu Reference links https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSmartPowerManagement.md https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSmartPowerManagement.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40862`	not_vulnerable	2026-06-03 14:48:03.655045	Details available Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting Published: 2022-09-23T13:45:25.000Z Updated: 2025-05-22T20:28:43.630Z Open on db.gcve.eu Reference links https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromNatStaticSetting.md https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromNatStaticSetting.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38326`	not_vulnerable	2026-06-03 14:47:49.517165	Details available Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting. Published: 2022-09-15T19:01:38.000Z Updated: 2024-08-03T10:54:03.758Z Open on db.gcve.eu Reference links https://github.com/1160300418/Vuls/blob/main/Tenda/AC/Vul_NatStaticSetting.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38325`	not_vulnerable	2026-06-03 14:47:49.516706	Details available Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile. Published: 2022-09-15T19:01:37.000Z Updated: 2024-08-03T10:54:03.530Z Open on db.gcve.eu Reference links https://github.com/1160300418/Vuls/blob/main/Tenda/AC/Vul_expandDlnaFile.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31446`	not_vulnerable	2026-06-03 14:47:11.204555	Details available Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. Published: 2022-06-14T02:41:45.000Z Updated: 2024-08-03T07:19:05.626Z Open on db.gcve.eu Reference links https://github.com/wshidamowang/Router/blob/main/Tenda/AC18/RCE_1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24987`	not_vulnerable	2026-06-03 14:42:08.329246	Details available Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to "radius". Published: 2020-09-04T19:24:39.000Z Updated: 2024-08-04T15:26:09.361Z Open on db.gcve.eu Reference links https://www.tendacn.com/en/product/AC18.html https://drive.google.com/file/d/1iqpr0EofOBC6kCq2USTOBPRlJu_naFjQ/view?usp=sharing https://cwe.mitre.org/data/definitions/287.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13394`	not_vulnerable	2026-06-03 14:41:36.607188	Details available An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetNetControlList list parameter for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks. Published: 2020-05-22T16:06:34.000Z Updated: 2024-08-04T12:18:17.568Z Open on db.gcve.eu Reference links https://joel-malwarebenchmark.github.io https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13394-Tenda-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13393`	not_vulnerable	2026-06-03 14:41:36.606457	Details available An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/saveParentControlInfo deviceId and time parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks. Published: 2020-05-22T16:06:41.000Z Updated: 2024-08-04T12:18:17.648Z Open on db.gcve.eu Reference links https://joel-malwarebenchmark.github.io https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13393-Tenda-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13392`	not_vulnerable	2026-06-03 14:41:36.605900	Details available An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/setcfm funcpara1 parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks. Published: 2020-05-22T16:06:47.000Z Updated: 2024-08-04T12:18:17.686Z Open on db.gcve.eu Reference links https://joel-malwarebenchmark.github.io https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13392-Tenda-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13391`	not_vulnerable	2026-06-03 14:41:36.605359	Details available An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetSpeedWan speed_dir parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks. Published: 2020-05-22T16:06:55.000Z Updated: 2024-08-04T12:18:17.636Z Open on db.gcve.eu Reference links https://joel-malwarebenchmark.github.io https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13391-Tenda-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13390`	not_vulnerable	2026-06-03 14:41:36.604793	Details available An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/addressNat entrys and mitInterface parameters for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks. Published: 2020-05-22T16:07:03.000Z Updated: 2024-08-04T12:18:17.683Z Open on db.gcve.eu Reference links https://joel-malwarebenchmark.github.io https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13390-Tenda-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13389`	not_vulnerable	2026-06-03 14:41:36.603157	Details available An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/openSchedWifi schedStartTime and schedEndTime parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks. Published: 2020-05-22T16:07:10.000Z Updated: 2024-08-04T12:18:17.598Z Open on db.gcve.eu Reference links https://joel-malwarebenchmark.github.io https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13389-Tenda-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16333`	not_vulnerable	2026-06-03 14:38:20.338939	Details available An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is directly used in a sprintf call to a local variable placed on the stack, which overrides the return address of the function, causing a buffer overflow. Published: 2018-09-02T03:00:00.000Z Updated: 2024-08-05T10:24:31.599Z Open on db.gcve.eu Reference links https://github.com/ZIllR0/Routers/blob/master/Tenda/oob1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14492`	not_vulnerable	2026-06-03 14:38:12.147264	Details available Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI. Published: 2018-07-21T12:00:00.000Z Updated: 2024-09-16T18:18:05.077Z Open on db.gcve.eu Reference links https://github.com/ZIllR0/Routers/blob/master/Tendaoob1.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.