CVE-2018-18708

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function "fromAddressNat" for a post request, the value is directly used in a sprintf to a local variable placed on the stack, which overrides the return address of the function.

• CWE-119

• https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-05/Tenda.mdExploit, Third Party Advisory
• https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-05/Tenda.mdExploit, Third Party Advisory

Published

Oct 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18702spider.admincp.php in iCMS v7.0.11 allows SQL injection via …
• CVE-2018-18703PhpTpoint Mailing Server Using File Handling 1.0 suffers fro…
• CVE-2018-18704PhpTpoint Pharmacy Management System suffers from a SQL inje…
• CVE-2018-18705PhpTpoint hospital management system suffers from multiple S…
• CVE-2018-18706An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-18707An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-18709An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V1…
• CVE-2018-1871IBM Financial Transaction Manager for Digital Payments for M…5.4
• CVE-2018-18710An issue was discovered in the Linux kernel through 4.19. An…
• CVE-2018-18711An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF …
• CVE-2018-18712An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF …
• CVE-2018-18713The function down_sql_action() in /admin/model/database.clas…