CVE-2022-35201

CriticalCVSS 9.8

Published: 19/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.79%

85th percentile - higher than 85% of all known CVEs

Summary

A remote command execution (RCE) vulnerability was discovered in Tenda AC18 with firmware version V15.03.05.05. An attacker can exploit this flaw to take control of the device without authorization.

Risk Assessment

The risk involves potential remote takeover of the Tenda AC18 router, which could lead to network compromise, data theft, or use of the device in DDoS attacks.

Recommendation

Immediately update the Tenda AC18 firmware to the latest available version that patches this vulnerability. If no update is available, consider disconnecting the device from the network or implementing additional network security measures.

Original NVD description (English source)

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.