Sign-up

ID

VAR-202510-0099


CVE

CVE-2025-11326


TITLE

Shenzhen Tenda Technology Co.,Ltd.  of  AC18  Buffer error vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-015526

DESCRIPTION

A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. Shenzhen Tenda Technology Co.,Ltd. of AC18 The firmware contains a buffer error vulnerability and a stack-based buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2025-11326 // JVNDB: JVNDB-2025-015526

AFFECTED PRODUCTS

vendor:tendamodel:ac18scope:eqversion:15.03.05.19\(6318\)

Trust: 1.0

vendor:tendamodel:ac18scope:eqversion:ac18 firmware 15.03.05.19(6318)

Trust: 0.8

vendor:tendamodel:ac18scope: - version: -

Trust: 0.8

vendor:tendamodel:ac18scope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2025-015526 // NVD: CVE-2025-11326

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-11326
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-015526
value: HIGH

Trust: 0.8

cna@vuldb.com: CVE-2025-11326
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-015526
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

cna@vuldb.com: CVE-2025-11326
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-015526
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2025-015526 // NVD: CVE-2025-11326

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:CWE-121

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Stack-based buffer overflow (CWE-121) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-015526 // NVD: CVE-2025-11326

EXTERNAL IDS

db:NVDid:CVE-2025-11326

Trust: 2.6

db:VULDBid:327209

Trust: 1.8

db:JVNDBid:JVNDB-2025-015526

Trust: 0.8

sources: JVNDB: JVNDB-2025-015526 // NVD: CVE-2025-11326

REFERENCES

url:https://github.com/noahze01/iot-vulnerable/blob/main/tenda/ac18/wifimacfilterset.md

Trust: 1.8

url:https://vuldb.com/?id.327209

Trust: 1.8

url:https://vuldb.com/?submit.664530

Trust: 1.8

url:https://www.tenda.com.cn/

Trust: 1.8

url:https://vuldb.com/?ctiid.327209

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2025-11326

Trust: 0.8

sources: JVNDB: JVNDB-2025-015526 // NVD: CVE-2025-11326

SOURCES

db:JVNDBid:JVNDB-2025-015526
db:NVDid:CVE-2025-11326

LAST UPDATE DATE

2025-10-11T23:36:24.233000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2025-015526date:2025-10-09T07:37:00
db:NVDid:CVE-2025-11326date:2025-10-07T17:02:15.203

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2025-015526date:2025-10-09T00:00:00
db:NVDid:CVE-2025-11326date:2025-10-06T08:15:32.120