CVE-2018-14492
High
Description
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTendacn Ac10 Firmware
PublishedJul 21, 2018
First seenJul 21, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tendacn ac10_firmware | v ≤ 15.03.06.23_cn | — |
| tendacn ac7_firmware | v ≤ 15.03.06.44_cn | — |
| tendacn ac9_firmware | v ≤ v15.03.05.19\(6318\)_cn | — |
| tendacn ac15_firmware | v ≤ 15.03.05.19_cn | — |
| tendacn ac18_firmware | v ≤ 15.03.05.19\(6318\)_cn | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.