AC
Product
AC18
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 2Low 0
Watch
Add AC18 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5606 | 9.8 | Jun 4 | Tenda AC18 SetIPTVCfg formSetIptv command injection Affected: 15.03.05.05 |
| CVE-2024-33180 | 9.8 | Jul 16 | Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo Affected: v15.03.3.10_en |
| CVE-2024-33835 | 9.8 | May 1 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function Affected: 15.03.05.05 |
| CVE-2024-2854 | 9.8 | Mar 24 | Tenda AC18 setsambacfg formSetSambaConf os command injection Affected: 15.03.05.05 |
| CVE-2025-11123 | 8.8 | Sep 28 | Tenda AC18 saveAutoQos stack-based overflow Affected: 15.03.05.19 |
| CVE-2025-11122 | 8.8 | Sep 28 | Tenda AC18 WizardHandle stack-based overflow Affected: 15.03.05.19 |
| CVE-2025-11121 | 8.8 | Sep 28 | Tenda AC18 AdvSetLanip command injection Affected: 15.03.05.19 |
| CVE-2025-9023 | 8.8 | Aug 15 | Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow Affected: 15.03.05.19; 15.03.06.44 |
| CVE-2025-5609 | 8.8 | Jun 4 | Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow Affected: 15.03.05.05 |
| CVE-2025-5608 | 8.8 | Jun 4 | Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow Affected: 15.03.05.05 |
| CVE-2025-5607 | 8.8 | Jun 4 | Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow Affected: 15.03.05.05 |
| CVE-2024-2558 | 8.8 | Mar 17 | Tenda AC18 execCommand formexeCommand stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2547 | 8.8 | Mar 17 | Tenda AC18 R7WebsSecurityHandler stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2546 | 8.8 | Mar 17 | Tenda AC18 fromSetWirelessRepeat stack-based overflow Affected: 15.13.07.09 |
| CVE-2024-2490 | 8.8 | Mar 15 | Tenda AC18 openSchedWifi setSchedWifi stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2489 | 8.8 | Mar 15 | Tenda AC18 SetNetControlList formSetQosBand stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2488 | 8.8 | Mar 15 | Tenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2487 | 8.8 | Mar 15 | Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2486 | 8.8 | Mar 15 | Tenda AC18 QuickIndex formQuickIndex stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-2485 | 8.8 | Mar 15 | Tenda AC18 SetSpeedWan formSetSpeedWan stack-based overflow Affected: 15.03.05.05 |
| CVE-2024-34974 | 8.2 | May 10 | Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter Affected: 15.03.05.19 |
| CVE-2024-41630 | 7.6 | Jul 31 | Stack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10_EN allows a remote attacker to execute arbitrary code via the ssid parameter at ip/goform/fast_setting_wifi_set Affected: 15.03.3.10 |
| CVE-2024-10280 | 7.5 | Oct 23 | Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference Affected: 20241022 |
| CVE-2025-8182 | 7.4 | Jul 26 | Tenda AC18 Samba smb.conf weak password Affected: 15.03.05.19 |
| CVE-2025-0528 | 7.2 | Jan 17 | Tenda AC8/AC10/AC18 HTTP Request telnet command injection Affected: 16.03.10.20 |
| CVE-2024-2559 | 6.5 | Mar 17 | Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgery Affected: 15.03.05.05 |
| CVE-2024-2560 | 4.3 | Mar 17 | Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery Affected: 15.03.05.05 |
Showing 27
