Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ac18:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc18 (88ab855b-49fa-5e90-bc79-5c3709e837ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9023 vulnerable 2026-06-08 07:45:21.600251 Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-15T08:32:07.431Z
Updated: 2025-08-15T16:01:28.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8182 vulnerable 2026-06-08 07:45:19.777330 Tenda AC18 Samba smb.conf weak password
MEDIUM (5.6)
A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-07-26T08:32:09.147Z
Updated: 2025-07-28T15:11:45.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5609 vulnerable 2026-06-08 07:37:25.308466 Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T20:00:25.562Z
Updated: 2025-06-04T20:48:15.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5608 vulnerable 2026-06-08 07:37:25.307985 Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T20:00:21.750Z
Updated: 2025-06-04T20:47:43.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5607 vulnerable 2026-06-08 07:37:25.307476 Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-04T19:31:07.808Z
Updated: 2025-06-04T20:40:49.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5606 vulnerable 2026-06-08 07:37:25.301819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11123 vulnerable 2026-06-08 07:02:28.103990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11122 vulnerable 2026-06-08 07:02:28.103357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11121 vulnerable 2026-06-08 07:02:28.100757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0528 vulnerable 2026-06-08 07:02:24.788003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2854 vulnerable 2026-06-08 06:35:27.524627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2560 vulnerable 2026-06-08 06:33:31.569440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2559 vulnerable 2026-06-08 06:33:31.568718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2558 vulnerable 2026-06-08 06:33:31.568256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2547 vulnerable 2026-06-08 06:33:31.316713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2546 vulnerable 2026-06-08 06:33:31.316037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2490 vulnerable 2026-06-08 06:33:31.214459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2489 vulnerable 2026-06-08 06:33:31.213759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2488 vulnerable 2026-06-08 06:33:31.213167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2487 vulnerable 2026-06-08 06:33:31.212572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2486 vulnerable 2026-06-08 06:33:31.211813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2485 vulnerable 2026-06-08 06:33:31.211190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10280 vulnerable 2026-06-08 06:22:03.920638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.