CVE-2022-35201

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

An unauthenticated command injection vulnerability exists in the /goform/fast_setting_internet_set endpoint of Tenda AC18 firmware version 15.03.05.05. An attacker can send a crafted request with a malicious payload in the mac parameter to execute arbitrary system commands.

Vulnerability in Tenda AC18 version 15.03.05.05: stack-based buffer overflow in function sub_45304 of file /goform/getRebootStatus (Web Management Interface component). An attacker can remotely trigger overflow via the callback argument. Exploit is publicly available.

A vulnerability was detected in Tenda AC18 version 15.03.05.05. Manipulation of the scanList argument in the sprintf function of /goform/SetDlnaCfg within the HTTP Request Handler component results in a stack-based buffer overflow. The attack can be executed remotely and the exploit is now public.

A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentControlInfo of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing in /goform/SetDDNSCfg, where manipulation of the ddnsEn argument results in stack-based buffer overflow. It is possible to launch the attack remotely, and the exploit is now public.

A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). The issue affects unknown code in /goform/SetUpnpCfg, where manipulation of the upnpEn argument leads to stack-based buffer overflow. The attack can be launched remotely, and the exploit is publicly available.

A stack-based buffer overflow vulnerability has been identified in Tenda AC18 version 15.03.05.19(6318), affecting an unknown function in /goform/setNotUpgrade. Manipulation of the newVersion argument leads to stack-based buffer overflow. The attack can be executed remotely and the exploit is publicly available.

A stack-based buffer overflow vulnerability has been found in Tenda AC18 version 15.03.05.19, affecting an unknown function in /goform/saveAutoQos. Manipulation of the enable argument causes stack-based buffer overflow. The attack may be initiated remotely and the exploit has been published.

A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.