GCVE - cpe:2.3:h:tenda:a18:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:a18:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	A18 (`3819e140-9426-5aff-b407-01e1d77a5a34`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-2930`	not_vulnerable	2026-06-08 07:55:17.842485	Tenda A18 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow MEDIUM (6.3) A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. Published: 2026-02-22T06:02:10.062Z Updated: 2026-02-27T18:14:49.138Z Open on db.gcve.eu Reference links https://vuldb.com/?id.347277 https://vuldb.com/?ctiid.347277 https://vuldb.com/?submit.755227 https://github.com/master-abc/cve/issues/40 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2877`	not_vulnerable	2026-06-08 07:55:17.774798	Tenda A18 Httpd Service WifiExtraSet strcpy stack-based overflow HIGH (8.8) A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2026-02-21T18:32:08.125Z Updated: 2026-02-23T15:40:18.876Z Open on db.gcve.eu Reference links https://vuldb.com/?id.347130 https://vuldb.com/?ctiid.347130 https://vuldb.com/?submit.754703 https://github.com/master-abc/cve/issues/39 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2876`	not_vulnerable	2026-06-08 07:55:17.773998	Tenda A18 setBlackRule parse_macfilter_rule stack-based overflow HIGH (8.8) A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Published: 2026-02-21T17:32:11.364Z Updated: 2026-02-23T15:41:12.127Z Open on db.gcve.eu Reference links https://vuldb.com/?id.347114 https://vuldb.com/?ctiid.347114 https://vuldb.com/?submit.754675 https://github.com/master-abc/cve/issues/38 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0848`	not_vulnerable	2026-06-08 07:02:25.696427	Tenda A18 HTTP POST Request SetCmdlineRun stack-based overflow MEDIUM (6.5) A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function SetCmdlineRun of the file /goform/SetCmdlineRun of the component HTTP POST Request Handler. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-01-30T01:00:19.576Z Updated: 2025-01-30T15:12:59.662Z Open on db.gcve.eu Reference links https://vuldb.com/?id.294011 https://vuldb.com/?ctiid.294011 https://vuldb.com/?submit.485802 https://github.com/alc9700jmo/CVE/issues/9 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32305`	not_vulnerable	2026-06-08 06:35:33.030385	Details available Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function. Published: 2024-04-17T00:00:00.000Z Updated: 2024-11-06T15:34:24.417Z Open on db.gcve.eu Reference links https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/fromWizardHandle.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50585`	not_vulnerable	2026-06-08 06:16:16.265338	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39829`	not_vulnerable	2026-06-08 06:09:38.041420	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39829`	vulnerable	2026-06-08 06:09:38.041177	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39828`	not_vulnerable	2026-06-08 06:09:38.040885	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39828`	vulnerable	2026-06-08 06:09:38.040685	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39827`	not_vulnerable	2026-06-08 06:09:38.040200	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39827`	vulnerable	2026-06-08 06:09:38.038969	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-44932`	not_vulnerable	2026-06-08 05:50:35.034004	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-44931`	not_vulnerable	2026-06-08 05:50:35.033370	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.