CVE-2023-38823: Tenda AC18 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.

Affected products

• Tenda AC18 Firmware: version 15.03.05.19(6318) only
• Tenda AC19 Firmware: version 15.03.05.19(6318) only
• Tenda AC6 Firmware: version 15.03.05.19(6318) only
• Tenda AC9 Firmware: version 15.03.05.19(6318) only

Published 2023-11-20. Last modified 2026-06-17.