Vulnerabilities > Tendacn > Ac18 Firmware > 15.03.05.05

DATE CVE VULNERABILITY TITLE RISK
2022-06-14 CVE-2022-31446 OS Command Injection vulnerability in Tendacn Ac18 Firmware 15.03.05.05/15.03.05.19
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
network
low complexity
tendacn CWE-78
critical
 9.8
9.8
2020-09-04 CVE-2020-24987 Improper Authentication vulnerability in Tendacn Ac18 Firmware
Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to "radius".
network
low complexity
tendacn CWE-287
critical
 9.8
9.8