Tenda AC18 Firmware 15.03.05.19(6318)
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac18_firmware:15.03.05.19\(6318\):*:*:*:*:*:*:*
part: o version: 15.03.05.19(6318) update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac18 Firmware (c033e423-55fc-5f65-8a57-945e177d23ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11328 |
vulnerable | 2026-06-08 07:02:28.591258 |
Tenda AC18 SetDDNSCfg stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2025-10-06T08:32:07.978Z
Updated: 2026-02-24T06:45:08.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11327 |
vulnerable | 2026-06-08 07:02:28.590693 |
Tenda AC18 SetUpnpCfg stack-based overflow
HIGH (8.8)
A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-10-06T08:02:06.994Z
Updated: 2026-02-24T06:44:54.763Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11326 |
vulnerable | 2026-06-08 07:02:28.590302 |
Tenda AC18 WifiMacFilterSet stack-based overflow
HIGH (8.8)
A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Published: 2025-10-06T07:32:07.259Z
Updated: 2026-02-24T06:44:41.452Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11325 |
vulnerable | 2026-06-08 07:02:28.589926 |
Tenda AC18 fast_setting_pppoe_set stack-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppoe_set. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Published: 2025-10-06T07:02:07.176Z
Updated: 2026-02-24T06:44:27.873Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11324 |
vulnerable | 2026-06-08 07:02:28.589376 |
Tenda AC18 setNotUpgrade stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2025-10-06T06:32:06.564Z
Updated: 2026-02-24T06:44:13.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10280 |
vulnerable | 2026-06-08 06:22:03.909536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38823 |
vulnerable | 2026-06-08 06:08:18.861970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40861 |
vulnerable | 2026-06-08 05:48:28.253526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40854 |
vulnerable | 2026-06-08 05:48:28.249480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38314 |
vulnerable | 2026-06-08 05:47:16.118983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38313 |
vulnerable | 2026-06-08 05:47:16.118458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38312 |
vulnerable | 2026-06-08 05:47:16.118047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38311 |
vulnerable | 2026-06-08 05:47:16.117581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38310 |
vulnerable | 2026-06-08 05:47:16.117037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38309 |
vulnerable | 2026-06-08 05:47:16.115784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30477 |
vulnerable | 2026-06-08 05:43:38.099354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30476 |
vulnerable | 2026-06-08 05:43:38.098668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30475 |
vulnerable | 2026-06-08 05:43:38.098256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30474 |
vulnerable | 2026-06-08 05:43:38.097926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30473 |
vulnerable | 2026-06-08 05:43:38.097496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30472 |
vulnerable | 2026-06-08 05:43:38.096161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.