CVE-2018-14492: Buffer Overflow
Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.19(6318)CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Tenda AC7, AC9, and AC10 vulnerability?
The vulnerability ID for this Tenda AC7, AC9, and AC10 vulnerability is CVE-2018-14492.
What is the severity of CVE-2018-14492?
The severity of CVE-2018-14492 is high with a CVSS score of 7.5.
How does this vulnerability impact Tenda AC7, AC9, and AC10 devices?
This vulnerability allows an attacker to trigger a stack-based buffer overflow by sending a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI on Tenda AC7, AC9, and AC10 devices.
Which Tenda devices and firmware versions are affected by CVE-2018-14492?
Tenda AC7 devices with firmware up to and including V15.03.06.44_CN, AC9 devices with firmware up to and including V15.03.05.19(6318)_CN, and AC10 devices with firmware up to and including V15.03.06.23_CN are affected by CVE-2018-14492.
Are Tenda AC7, AC9, and AC10 devices vulnerable to CVE-2018-14492?
Yes, Tenda AC7, AC9, and AC10 devices are vulnerable to CVE-2018-14492 if they are running the affected firmware versions.