CVE-2025-11123

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

A remote command execution (RCE) vulnerability was discovered in Tenda AC18 with firmware version V15.03.05.05. An attacker can exploit this flaw to take control of the device without authorization.

An unauthenticated command injection vulnerability exists in the /goform/fast_setting_internet_set endpoint of Tenda AC18 firmware version 15.03.05.05. An attacker can send a crafted request with a malicious payload in the mac parameter to execute arbitrary system commands.

Vulnerability in Tenda AC18 version 15.03.05.05: stack-based buffer overflow in function sub_45304 of file /goform/getRebootStatus (Web Management Interface component). An attacker can remotely trigger overflow via the callback argument. Exploit is publicly available.

A vulnerability was detected in Tenda AC18 version 15.03.05.05. Manipulation of the scanList argument in the sprintf function of /goform/SetDlnaCfg within the HTTP Request Handler component results in a stack-based buffer overflow. The attack can be executed remotely and the exploit is now public.

A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing in /goform/SetDDNSCfg, where manipulation of the ddnsEn argument results in stack-based buffer overflow. It is possible to launch the attack remotely, and the exploit is now public.

A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). The issue affects unknown code in /goform/SetUpnpCfg, where manipulation of the upnpEn argument leads to stack-based buffer overflow. The attack can be launched remotely, and the exploit is publicly available.

A stack-based buffer overflow vulnerability has been identified in Tenda AC18 version 15.03.05.19(6318), affecting an unknown function in /goform/setNotUpgrade. Manipulation of the newVersion argument leads to stack-based buffer overflow. The attack can be executed remotely and the exploit is publicly available.

A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

A vulnerability in Tenda AC18 15.03.05.19 affects an unknown function in /goform/AdvSetLanip. Manipulation of the lanIp argument leads to command injection. The attack can be initiated remotely and the exploit is public.