CVE-2018-14492 - OpenCVE

Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Tendacn	Ac15 Ac7 Ac10 Ac9 Ac9 Firmware Ac7 Firmware Ac18 Firmware Ac18 Ac10 Firmware Ac15 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tendacn:ac7_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tendacn:ac7:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tendacn:ac9_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tendacn:ac9:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tendacn:ac10_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tendacn:ac10:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:tendacn:ac15_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tendacn:ac15:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:tendacn:ac18_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tendacn:ac18:-:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/ZIllR0/Routers/blob/master/Tendaoob1.md	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-03T16:22:28

Updated: 2022-10-03T16:22:28

Reserved: 2022-10-03T00:00:00

Link: CVE-2018-14492

JSON object: View

NVD Information

Status : Analyzed

Published: 2018-07-21T12:29:00.333

Modified: 2020-08-24T17:37:01.140

Link: CVE-2018-14492

JSON object: View

Redhat Information

No data.

CWE

CWE-787

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tendacn:ac7_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7FD0F68A-7B1F-47EA-87A4-534F3076EEB6", "versionEndIncluding": "15.03.06.44_cn", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tendacn:ac7:-:*:*:*:*:*:*:*", "matchCriteriaId": "1D8C8522-F517-4702-828F-D79C803574FF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tendacn:ac9_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F518F97C-6E41-4488-BC74-A55D00342473", "versionEndIncluding": "v15.03.05.19\\(6318\\)_cn", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tendacn:ac9:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7871810-DC61-4B96-8C3D-2DA1FE202C91", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tendacn:ac10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C539B44-DC11-406C-8AEB-30570A1263B1", "versionEndIncluding": "15.03.06.23_cn", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tendacn:ac10:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FE0DA72-D225-4BAE-8813-816AB8F0B3FB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tendacn:ac15_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "85FC79AC-BE8A-481E-9782-C000CB45FAC0", "versionEndIncluding": "15.03.05.19_cn", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tendacn:ac15:-:*:*:*:*:*:*:*", "matchCriteriaId": "4EEDF33B-0D03-492A-BCD1-0E6B79F783EF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tendacn:ac18_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B058E65F-5459-42B1-A5EC-A62635C3751A", "versionEndIncluding": "15.03.05.19\\(6318\\)_cn", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tendacn:ac18:-:*:*:*:*:*:*:*", "matchCriteriaId": "FCF0F551-6E6C-48D6-9C2A-740B84AF0349", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI."}, {"lang": "es", "value": "Los dispositivos Tenda AC7 hasta la versi\u00f3n V15.03.06.44_CN, AC9 hasta la versi\u00f3n V15.03.05.19(6318)_CN y AC10 hasta la versi\u00f3n V15.03.06.23_CN tienen un desbordamiento de b\u00fafer basado en pila mediante unos par\u00e1metros limitSpeed o limitSpeedup largos en un URI /goform sin especificar."}], "id": "CVE-2018-14492", "lastModified": "2020-08-24T17:37:01.140", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-07-21T12:29:00.333", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/ZIllR0/Routers/blob/master/Tendaoob1.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}