CNNVD-202509-4283 Information
CNNVD ID
CNNVD-202509-4283
Related CVE
- CNNVD Published: 2025-09-28
Description (Chinese)
Tenda AC18是中国腾达（Tenda）公司的一款路由器。 Tenda AC18 15.03.05.19版本存在安全漏洞，该漏洞源于文件/goform/WizardHandle中参数WANT/mtuvalue存在栈缓冲区溢出，可能被远程利用。
Description (English)
Tenda AC18 is a router for Tenda China. There is a security loophole in the version of Tenda AC18 15.03.05.19, which stems from the spilling out of the WANT/mtuvalue, the parameter in the document/goform/Wizardhandle, which could be used remotely.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
腾达
Published
2025-09-28
Last Modified
2026-02-24
References
https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/WizardHandle.md https://www.tenda.com.cn/ https://vuldb.com/?ctiid.326203 https://vuldb.com/?id.326203 https://vuldb.com/?submit.664194 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/WizardHandle2.md https://vuldb.com/?submit.664195 https://access.redhat.com/security/cve/cve-2025-11122
Share on: