CVE-2018-18732

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-10-29 · updated 2026-06-17
Weakness: CWE-119

Description

An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'ntpServer' parameter for a post request, the value is directly used in a strcpy to a local variable placed on the stack, which overrides the return address of the function.

Affected products

Tenda AC10: 15.03.06.23_cn
Tenda AC15: 15.03.05.19_cn
Tenda AC18: 15.03.05.19(6318)_cn
Tenda AC7: 15.03.06.44_cn
Tenda AC9: 15.03.05.19(6318)_cn

References

https://github.com/ZIllR0/Routers/blob/master/Tenda/stack2.md
https://github.com/ZIllR0/Routers/blob/master/Tenda/stack2.md

Get alerted when CVE-2018-18732 or the next vulnerability affects your stack