CVE-2025-11121: falha de média gravidade em Tenda AC18
Tenda AC18 AdvSetLanip command injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 3.7%
A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · AC18CVEs relacionadas — Tenda AC18
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0528HIGHTenda AC8/AC10/AC18 HTTP Request telnet command injectionEPSS 6.2%CVE-2024-2854MEDIUMTenda AC18 setsambacfg formSetSambaConf os command injectionEPSS 3.9%CVE-2025-5606MEDIUMTenda AC18 SetIPTVCfg formSetIptv command injectionEPSS 3.8%CVE-2024-2485HIGHTenda AC18 SetSpeedWan formSetSpeedWan stack-based overflowEPSS 1.7%CVE-2024-2490HIGHTenda AC18 openSchedWifi setSchedWifi stack-based overflowEPSS 1.6%CVE-2024-2489HIGHTenda AC18 SetNetControlList formSetQosBand stack-based overflowEPSS 1.6%