Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:a18_firmware:15.13.07.13:*:*:*:*:*:*:*

part: o version: 15.13.07.13 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductA18 Firmware (ffd8d679-c965-590a-a1f1-20a72ef2ab9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2930 vulnerable 2026-06-08 07:55:17.842331 Tenda A18 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow
MEDIUM (6.3)
A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-02-22T06:02:10.062Z
Updated: 2026-02-27T18:14:49.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2877 vulnerable 2026-06-08 07:55:17.774690 Tenda A18 Httpd Service WifiExtraSet strcpy stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-02-21T18:32:08.125Z
Updated: 2026-02-23T15:40:18.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2876 vulnerable 2026-06-08 07:55:17.773201 Tenda A18 setBlackRule parse_macfilter_rule stack-based overflow
HIGH (8.8)
A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-02-21T17:32:11.364Z
Updated: 2026-02-23T15:41:12.127Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.