Tenda A18 Firmware
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Tenda A18 Firmware.
By the Year
In 2026 there have been 0 vulnerabilities in Tenda A18 Firmware. Last year, in 2025 A18 Firmware had 1 security vulnerability published. Right now, A18 Firmware is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 1 | 9.80 |
| 2024 | 2 | 9.80 |
| 2023 | 0 | 0.00 |
| 2022 | 2 | 7.50 |
It may take a day or so for new A18 Firmware vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Tenda A18 Firmware Security Vulnerabilities
Tenda A18 <=15.13.07.09 HTTP POST SetCmdlineRun stack-based buffer overflow
CVE-2025-0848
9.8 - Critical
- January 30, 2025
A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function SetCmdlineRun of the file /goform/SetCmdlineRun of the component HTTP POST Request Handler. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Buffer Overflow
Tenda A18 v15.03.05.05 Firmware Stack Overflow via PPW
CVE-2024-32305
- April 17, 2024
Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.
Tenda A18 v15.13.07.09 Stack Overflow in formSetDeviceName via devName
CVE-2023-50585
9.8 - Critical
- January 09, 2024
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
Memory Corruption
Unauth Telnet Access via Access Control Flaw in Tenda A18 v15.13.07.09
CVE-2022-44932
7.5 - High
- December 08, 2022
An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service.
Stack Overflow via security_5g on Tenda A18 v15.13.07.09
CVE-2022-44931
7.5 - High
- December 08, 2022
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
Memory Corruption
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Tenda A18 Firmware or by Tenda? Click the Watch button to subscribe.
